PT-2018-3742 · Mozilla+5 · Thunderbird+5

Christian Dresen

+7

·

Publicado

2018-05-18

·

Atualizado

2024-06-15

·

CVE-2018-5162

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.8 Thunderbird ESR versions prior to 52.8
Description The issue is related to information disclosure. It allows a remote attacker to gain unauthorized access to protected information through the src attribute of remote images or links. This could lead to the leakage of plaintext from decrypted emails.
Recommendations For Thunderbird versions prior to 52.8, update to version 52.8 or later. For Thunderbird ESR versions prior to 52.8, update to version 52.8 or later. As a temporary workaround, consider restricting access to remote images or links in emails until a patch is available.

Correção

Missing Encryption of Sensitive Data

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-311CWE-200

Identificadores relacionados

ALT-PU-2018-1753
BDU:2021-04138
CESA-2018_1725
CESA-2018_1726
CVE-2018-5162
DLA-1382-1
DSA-4209-1
MGASA-2018-0261
OPENSUSE-SU-2018_1361-1
OPENSUSE-SU-2024:10601-1
RHSA-2018:1725
RHSA-2018:1726
RHSA-2018_1725
RHSA-2018_1726
USN-3660-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Thunderbird
Ubuntu