CVE-2021-29957

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird < 78.10.2.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 24, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-299584.3When a download was initiated, the client did not check whether it was in normal or private browsing mode, which led to private mode cookiesCVE-2021-299594.3When a user has already allowed a website to access microphone and camera, disabling camera sharing would not fully prevent the website fromCVE-2021-299604.3Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web CVE-2021-299614.3When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over tCVE-2021-299624.3Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. *This bug only affects Firefox for AndrCVE-2021-299634.3Address bar search suggestions in private browsing mode were re-using session data from normal mode. *This bug only affects Firefox for AndrCVE-2021-299647.1A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds reCVE-2021-299655.3A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords fCVE-2021-299668.8Mozilla developers reported memory safety bugs present in Firefox 88. Some of these bugs showed evidence of memory corruption and we presumeCVE-2021-299678.8Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these bugs showed evidence of memory corCVE-2021-299688.1When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. OtherCVE-2021-299695.9If Thunderbird was configured to use STARTTLS for an IMAP connection, and an attacker injected IMAP server responses prior to the completion