Unrated severityNVD Advisory· Published Sep 27, 2019· Updated Aug 4, 2024
CVE-2019-11739
CVE-2019-11739
Description
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 68.1 and Thunderbird < 60.9.
Affected products
8- osv-coords7 versionspkg:rpm/opensuse/enigmail&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/enigmail&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP1
< 2.1.2-lp150.34.1+ 6 more
- (no CPE)range: < 2.1.2-lp150.34.1
- (no CPE)range: < 2.1.2-lp151.2.6.1
- (no CPE)range: < 68.1.1-lp150.3.51.1
- (no CPE)range: < 68.1.1-lp151.2.13.1
- (no CPE)range: < 91.1.1-1.1
- (no CPE)range: < 68.1.1-3.51.1
- (no CPE)range: < 68.1.1-3.51.1
- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.htmlmitrevendor-advisoryx_refsource_SUSE
- lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.htmlmitrevendor-advisoryx_refsource_SUSE
- usn.ubuntu.com/4150-1/mitrevendor-advisoryx_refsource_UBUNTU
- bugzilla.mozilla.org/show_bug.cgimitrex_refsource_MISC
- www.mozilla.org/security/advisories/mfsa2019-29/mitrex_refsource_CONFIRM
- www.mozilla.org/security/advisories/mfsa2019-30/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.