PT-2019-5317 · Mozilla+5 · Thunderbird+5

Damian Poddebniak

+4

·

Publicado

2019-09-06

·

Atualizado

2024-06-15

·

CVE-2019-11739

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.9 Thunderbird versions prior to 68.1
Description The issue is related to the Secure/Multipurpose Internet Mail Extensions (S/MIME) functionality in the Thunderbird email client, specifically concerning the lack of protection for certain data. This could allow a remote attacker to gain unauthorized access to protected information. Additionally, it is noted that encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in an HTML reply or forward.
Recommendations For versions prior to 60.9, update to version 60.9 or later. For versions prior to 68.1, update to version 68.1 or later.

Exploit

Correção

Cleartext Transmission of Sensitive Information

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-319CWE-200

Identificadores relacionados

ALT-PU-2020-1166
ALT-PU-2020-1515
BDU:2020-02383
CESA-2019_2773
CESA-2019_2774
CVE-2019-11739
DLA-1926-1
DSA-4523-1
MGASA-2019-0275
MGASA-2019-0285
OPENSUSE-SU-2019:2248-1
OPENSUSE-SU-2019:2249-1
OPENSUSE-SU-2019_2248-1
OPENSUSE-SU-2019_2249-1
OPENSUSE-SU-2024:10601-1
RHSA-2019:2773
RHSA-2019:2774
RHSA-2019:2807
RHSA-2019_2773
RHSA-2019_2774
RHSA-2019_2807
SUSE-SU-2019:2515-1
USN-4150-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Thunderbird
Ubuntu