CVE-2019-11739

Reference Links

• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1571481
• https://usn.ubuntu.com/4150-1/
• https://www.mozilla.org/security/advisories/mfsa2019-29/
• https://www.mozilla.org/security/advisories/mfsa2019-30/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-29/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-30/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-29/#CVE-2019-11739
• https://launchpad.net/bugs/cve/CVE-2019-11739
• https://security-tracker.debian.org/tracker/CVE-2019-11739
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11739
• https://nvd.nist.gov/vuln/detail/CVE-2019-11739
• https://ubuntu.com/security/CVE-2019-11739

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-29
• MFSA2019-30

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-11739
• CVE-2019-11746
• CVE-2019-11744
• CVE-2019-11742
• CVE-2019-11752
• CVE-2019-11743
• CVE-2019-11740

Frequently Asked Questions

• What is CVE-2019-11739?

  CVE-2019-11739 is a vulnerability in Mozilla Thunderbird that allows encrypted S/MIME parts in a crafted multipart/alternative message to leak plaintext when included in a HTML reply or forward.

• How does CVE-2019-11739 affect Thunderbird?

  CVE-2019-11739 affects Thunderbird versions 60.9 up to but not including 68.1.

• What is the severity of CVE-2019-11739?

  CVE-2019-11739 has a severity value of 7, which is considered high.

• How can I fix CVE-2019-11739?

  To fix CVE-2019-11739, update Thunderbird to version 60.9 or higher, but not including version 68.1.

• Where can I find more information about CVE-2019-11739?

  You can find more information about CVE-2019-11739 in the following references: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1571481), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2019-30/) and [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2019-29/).