CVE-2019-11755

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 68.1.1

Description The issue is related to insufficient input validation in the handling of S/MIME messages. Specifically, a crafted message with an inner encryption layer and an outer SignedData layer could be shown as having a valid digital signature, even if the signer did not have access to the encrypted message's contents. This could potentially allow a remote attacker to compromise data integrity.

Recommendations For Thunderbird versions prior to 68.1.1, update to version 68.1.1 or later to resolve the issue.