CVE-2019-11739

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.9 Thunderbird versions prior to 68.1

Description The issue is related to the Secure/Multipurpose Internet Mail Extensions (S/MIME) functionality in the Thunderbird email client, specifically concerning the lack of protection for certain data. This could allow a remote attacker to gain unauthorized access to protected information. Additionally, it is noted that encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in an HTML reply or forward.

Recommendations For versions prior to 60.9, update to version 60.9 or later. For versions prior to 68.1, update to version 68.1 or later.