CVE-2018-18509

A flaw during verification of certain S/MIME signatures causes emails to be shown in Thunderbird as having a valid digital signature, even if the shown message contents aren't covered by the signature. The flaw allows an attacker to reuse a valid S/MIME signature to craft an email message with arbitrary content. This vulnerability affects Thunderbird < 60.5.1.

• CWE-347

• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html
• http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Apr/38Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/04/30/4Mailing List, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:1144
• https://bugzilla.mozilla.org/show_bug.cgi?id=1507218Issue Tracking, Permissions Required, Vendor Advisory
• https://github.com/RUB-NDS/Johnny-You-Are-Fired
• https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf
• https://www.mozilla.org/security/advisories/mfsa2019-06/Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00043.html
• http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Apr/38Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/04/30/4Mailing List, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2019:1144
• https://bugzilla.mozilla.org/show_bug.cgi?id=1507218Issue Tracking, Permissions Required, Vendor Advisory
• https://github.com/RUB-NDS/Johnny-You-Are-Fired
• https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf
• https://www.mozilla.org/security/advisories/mfsa2019-06/Vendor Advisory

Published

Apr 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18503When JavaScript is used to create and manipulate an audio bu…
• CVE-2018-18504A crash and out-of-bounds read can occur when the buffer of …
• CVE-2018-18505An earlier fix for an Inter-process Communication (IPC) vuln…
• CVE-2018-18506When proxy auto-detection is enabled, if a web server serves…5.9
• CVE-2018-18507Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-18508In Network Security Services (NSS) before 3.36.7 and before …6.5
• CVE-2018-1851IBM WebSphere Application Server Liberty OpenID Connect coul…7.3
• CVE-2018-18510The about:crashcontent and about:crashparent pages can be tr…
• CVE-2018-18511Cross-origin images can be read from a canvas element in vio…
• CVE-2018-18512A use-after-free vulnerability can occur while playing a sou…
• CVE-2018-18513A crash can occur when processing a crafted S/MIME message o…
• CVE-2018-18514Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…