Showing 1 - 5 of 5

CVE-2021-23992

Status Candidate

Overview

Thunderbird did not check if the user ID associated with an OpenPGP key has a valid self signature. An attacker may create a crafted version of an OpenPGP key, by either replacing the original user ID, or by adding another user ID. If Thunderbird imports and accepts the crafted key, the Thunderbird user may falsely conclude that the false user ID belongs to the correspondent. This vulnerability affects Thunderbird < 78.9.1.

Related Files

Debian Security Advisory 4897-1: Posted Apr 28, 2021; Authored by Debian | Site debian.org; Debian Linux Security Advisory 4897-1 - Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. In adddition a number of security issues were addressed in the OpenPGP support.; tags | advisory, arbitrary, info disclosure; systems | linux, debian; advisories | CVE-2021-23961, CVE-2021-23991, CVE-2021-23992, CVE-2021-23993, CVE-2021-23994, CVE-2021-23995, CVE-2021-23998, CVE-2021-23999, CVE-2021-24002, CVE-2021-29945, CVE-2021-29946, CVE-2021-29948, CVE-2021-29949; SHA-256 | d046261a5bea547646c1ad71555d4faa8f38e2e133e219e9721c0bfe1ba81218; Download | Favorite | View

Red Hat Security Advisory 2021-1201-01: Posted Apr 15, 2021; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2021-1201-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.1.; tags | advisory; systems | linux, redhat; advisories | CVE-2021-23991, CVE-2021-23992, CVE-2021-23993; SHA-256 | 820794c43836fe077b75190ec69858bae073323c74eae7a8f16a6336ebcd5e5e; Download | Favorite | View

Red Hat Security Advisory 2021-1192-01: Posted Apr 14, 2021; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2021-1192-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.1.; tags | advisory; systems | linux, redhat; advisories | CVE-2021-23991, CVE-2021-23992, CVE-2021-23993; SHA-256 | c948e9ec428568d27a15b05550951abc57ff9feb310c82e6b96d46880c3ddbdd; Download | Favorite | View

Red Hat Security Advisory 2021-1193-01: Posted Apr 14, 2021; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2021-1193-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.1.; tags | advisory; systems | linux, redhat; advisories | CVE-2021-23991, CVE-2021-23992, CVE-2021-23993; SHA-256 | 332440aa23616d424274ca68a996e31b6e75368d0d74703d69046824987fb3b4; Download | Favorite | View

Red Hat Security Advisory 2021-1190-01: Posted Apr 14, 2021; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2021-1190-01 - Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.9.1.; tags | advisory; systems | linux, redhat; advisories | CVE-2021-23991, CVE-2021-23992, CVE-2021-23993; SHA-256 | b4855587d2c21eaa956921785d37b83cebbf547204ef5645662bbd6c3b731c03; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 235 files
Ubuntu 50 files
Debian 19 files
LiquidWorm 15 files
Apple 9 files
Gentoo 5 files
Google Security Research 3 files
Alter Prime 3 files
Pierre Kim 2 files
Jann Horn 2 files

File Archives

Systems

AIX (430)
Apple (2,126)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,163)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,604)
HPUX (881)
iOS (393)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,945)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,337)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,987)
UNIX (9,475)
UnixWare (188)
Windows (6,784)
Other

CVE-2021-23992

Overview

Related Files

File Archive:

November 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems