SecuritySpace - CVE-2021-23991

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2021-23991

Description: If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-23991
https://bugzilla.mozilla.org/show_bug.cgi?id=1673240
https://bugzilla.mozilla.org/show_bug.cgi?id=1673240
https://www.mozilla.org/security/advisories/mfsa2021-13/
https://www.mozilla.org/security/advisories/mfsa2021-13/

CVE ID:	CVE-2021-23991
Description:	If a Thunderbird user has previously imported Alice's OpenPGP key, and Alice has extended the validity period of her key, but Alice's updated key has not yet been imported, an attacker may send an email containing a crafted version of Alice's key with an invalid subkey, Thunderbird might subsequently attempt to use the invalid subkey, and will fail to send encrypted email to Alice. This vulnerability affects Thunderbird < 78.9.1.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-23991 https://bugzilla.mozilla.org/show_bug.cgi?id=1673240 https://bugzilla.mozilla.org/show_bug.cgi?id=1673240 https://www.mozilla.org/security/advisories/mfsa2021-13/ https://www.mozilla.org/security/advisories/mfsa2021-13/