Published: 24/06/2021 Updated: 08/08/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid subkey, but the RNP library rejects it from being used, causing encryption to fail. This vulnerability affects Thunderbird < 78.9.1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure In adddition a number of security issues were addressed in the OpenPGP support For the stable distribution (buster), these problems have been fixed in version 1:78100-1~deb10u1 We recommend that you upgrade y ...

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine This vulnerability affects Firefox < 85 (CVE-2021-23991) (CVE-2021-23992) (CVE-2021-23961) (CVE-2021-23993) (CVE-2021-23994) (CVE-2021-23995) (CVE- ...

Mozilla Foundation Security Advisory 2021-13 Security Vulnerabilities fixed in Thunderbird 7891 Announced April 8, 2021 Impact moderate Products Thunderbird Fixed in Thunderbird 7891 ...

A security issue was found in Thunderbird before version 7891 An attacker may perform a denial of service (DoS) attack to prevent a user from sending encrypted email to a correspondent If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird ...

CWE-347 https://bugzilla.mozilla.org/show_bug.cgi?id=1666360 https://www.mozilla.org/security/advisories/mfsa2021-13/https://nvd.nist.gov https://www.debian.org/security/2021/dsa-4897

CVE-2021-23993

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect