CVE-2018-12373

MÉDIO 6.5CVE-2018-12373 · Published 18/10/2018 · updated 17/06/2026

Em resumo

CVE-2018-12373 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta thunderbird (mozilla).
Chance de exploração nos próximos 30 dias (EPSS): 2.4%, maior que 84.1% das vulnerabilidades.
Correção: atualize para 52.9.0 ou posterior.

Package	Affected versions	Patched versions
thunderbird mozilla	`< 52.9.0`	`52.9.0`

Description

dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.

References

securityfocus.com/bid/104613 · Third Party Advisory
access.redhat.com/errata/RHSA-2018:2251 · Third Party Advisory
access.redhat.com/errata/RHSA-2018:2252 · Third Party Advisory
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
lists.debian.org/debian-lts-announce/2018/07/msg00013.html · Mailing List
security.gentoo.org/glsa/201811-13 · Third Party Advisory
usn.ubuntu.com/3714-1 · Third Party Advisory
debian.org/security/2018/dsa-4244 · Third Party Advisory
mozilla.org/security/advisories/mfsa2018-18 · Vendor Advisory

Mais vulnerabilidades de thunderbird

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

thunderbird

mozilla

< 52.9.0

52.9.0

Mais vulnerabilidades de thunderbird

Ver tudo →