CVE-2019-11739

Publication date

2019-09-27 17:19:35

Family

mozilla

State

PUBLISHED

Description

Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 68.1 and Thunderbird < 60.9.