CVE-2021-29957

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 78.10.2

Description The issue arises when a MIME encoded email contains an OpenPGP inline signed or encrypted message part, along with an additional unprotected part. In such cases, Thunderbird fails to indicate that only parts of the message are protected. This is due to insufficient security measures implemented in the email client. An attacker could exploit this by sending a specially crafted email, potentially affecting data integrity.

Recommendations For versions prior to 78.10.2, update to version 78.10.2 or later to resolve the issue.