March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – VMware Workspace ONE Accessv and Identity Manager server-side
December 21, 2021
Rewterz Threat Alert – Donot APT Group – Active IOCs
December 21, 2021
Rewterz Threat Advisory – VMware Workspace ONE Accessv and Identity Manager server-side
December 21, 2021
Rewterz Threat Alert – Donot APT Group – Active IOCs
December 21, 2021
Severity
Medium
Analysis Summary
CVE-2021-41260
Mozilla Thunderbird could allow a remote attacker to bypass security restrictions, caused by the failure of OpenPGP signature status to consider additional message content. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to give the false impression that the additional contents were also covered by the digital signature.
Impact
- Security Bypass
Affected Vendors
Mozilla
Affected Products
- Mozilla Thunderbird 91.4.0
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade, or suggested workaround information.