description: Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.
problem types: S/MIME and PGP decryption oracles can be built with HTML emails
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 52.9, status: affected, version: unspecified, versionType: custom
}