description: A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted signature. This can be used as a denial-of-service (DOS) attack because Thunderbird reopens the last seen message on restart, triggering the crash again. This vulnerability affects Thunderbird < 60.5.
problem types: DOS and crash with crafted S/MIME message or XPI package
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 60.5, status: affected, version: unspecified, versionType: custom
}