Not rated
CVE-2018-5185 Plaintext of decrypted emails can leak through by user submitting an embedded form
Description
Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Thunderbird ESR 52.8 | earliest → < 52.8 | 52.8 |
| Thunderbird 52.8 | earliest → < 52.8 | 52.8 |
References
- RHSA-2018:1726 access.redhat.com
- GLSA-201811-13 security.gentoo.org
- www.mozilla.org www.mozilla.org
- USN-3660-1 usn.ubuntu.com
- 1040946 www.securitytracker.com
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update lists.debian.org
- RHSA-2018:1725 access.redhat.com
- bugzilla.mozilla.org bugzilla.mozilla.org
- DSA-4209 www.debian.org
- 104240 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Thunderbird ESR
The 13 CVEs of Thunderbird ESR →
CVE-2018-5174
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated…
Not rated
CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
Not rated
CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext
Not rated
CVE-2018-5183
Mozilla developers backported selected changes in the Skia library
Not rated