Description

A flaw was found in Thunderbird. When requesting a security device password, such as a smartcard PIN or Primary Password, while decrypting a Secure/Multipurpose Internet Mail Extensions (S/MIME) message, the message loading process can finish or be canceled while the prompt remains open. This premature termination frees the message decoder while it is still in use, resulting in a use-after-free memory error. An attacker could exploit this vulnerability to cause an application crash, leading to a Denial of Service (DoS), or potentially execute arbitrary code.

Mitigation

Aliases