Unrated severityNVD Advisory· Published Oct 18, 2018· Updated Aug 5, 2024
CVE-2018-12372
CVE-2018-12372
Description
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4< 52.9+ 1 more
- (no CPE)range: < 52.9
- (no CPE)range: unspecified
- osv-coords2 versionspkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015
< 91.1.1-1.1+ 1 more
- (no CPE)range: < 91.1.1-1.1
- (no CPE)range: < 52.9.1-3.7.1
Patches
Vulnerability mechanics
References
9- access.redhat.com/errata/RHSA-2018:2251mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2018:2252mitrevendor-advisoryx_refsource_REDHAT
- security.gentoo.org/glsa/201811-13mitrevendor-advisoryx_refsource_GENTOO
- usn.ubuntu.com/3714-1/mitrevendor-advisoryx_refsource_UBUNTU
- www.debian.org/security/2018/dsa-4244mitrevendor-advisoryx_refsource_DEBIAN
- www.securityfocus.com/bid/104613mitrevdb-entryx_refsource_BID
- bugzilla.mozilla.org/show_bug.cgimitrex_refsource_CONFIRM
- lists.debian.org/debian-lts-announce/2018/07/msg00013.htmlmitremailing-listx_refsource_MLIST
- www.mozilla.org/security/advisories/mfsa2018-18/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.