CVE-2021-29957

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird < 78.10.2.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.94% chance of exploitation in the next 30 days, 58th percentile

Published

2021-06-24

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://bugzilla.mozilla.org/show_bug.cgi?id=1673241

References

• CVE Record
• NVD entry

Related

• CVE-2021-29923
• CVE-2021-29985
• CVE-2021-29922
• CVE-2021-29995
• CVE-2021-29921
• CVE-2021-29996