Vulnetix
Try Vulnetix Request Demo
CVE-2019-11755 PUBLISHED

A crafted S/MIME message consisting of an inner encryption layer and an outer SignedData layer was shown as having a valid digital signature, although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted message. Previous versions had only suppressed showing a digital signature for messages with an outer multipart/signed layer. This vulnerability affects Thunderbird < 68.1.1.

EPSS 0.41% · 60.8th percentile

Risk Scores

EPSS Score
0.41%
60.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSthunderbird0, 1:38.3.0+build1-0ubuntu2, 1:38.5.1+build2-0ubuntu1
Ubuntu:18.04:LTSthunderbird0, 1:52.4.0+build1-0ubuntu2, 1:52.6.0+build1-0ubuntu1

Timeline

References

Open in Interactive Console →