1860518 - Mails with wrong subjects

Status: RESOLVED WORKSFORME

(Thunderbird :: Security, defect)

Description

[bindereif]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36

Steps to reproduce:

Problem occured after the last thunderbird update: on Version 115.3.3 (64-Bit)

Actual results:

Mails and subjects of different mails are simply mixed up. So I have mails with subjects from other mails in my mailbox.
(In Strato they are correct, Thunderbird and PC restart and clearing the cache did not help)

Expected results:

Right subject assigned to the right mail

Comment 1

[bindereif]

Attachment: Subject_from_another_mail.JPG

The Subject "RE: Offboarding..." is obviously not the actual subject of the Mail from [e-mail]
It displays the same subject as an email coming in 7 minutes before.

Comment 2

[Gregor]

I have encountered the same bug. It occurred multiple times in the past days following the update to Version 115.3.3 (64-Bit) and occurred with multiple mail providers (two of my gmail as well as my magenta.de account, which I manage via Thunderbird - sorry for the German language).

Below is an email from paypal that got assigned subject "Test2". Obviously, this is not the real title. While the other swaps of subject lines are quite recent subject lines, it appears like the title "Test2" is from an unrelated email account (also managed in Thunderbird) that is over a decade old.

Interestingly, I can search for the mail using it's original subject line and it will be displayed there as preview with the original subject line. But once I select it to view it in full, the swapped subject is being displayed.

This bug seems to be quite severe, since it occurs frequently (almost daily in my case) and misrepresents information (the subject line being probably among the most sensitive information). The misrepresentation can usually only be detected when users notice that the subject does not match the email contents. When replying to an email with swapped subject line or forwarding it, the swapped information will also remain and be sent unless the user notices the issue.

My System Data: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Thunderbird/115.3.3, Operation System: Windows_NT 10.0 22621

Comment 3

[Gregor]

Attachment: The email title is being misrepresented as "Test2".

Comment 4

[Gregor]

Attachment: I can however search for the email in question by it's actual subject line, and it will be previewed correctly (marked red) in the list of search results.

Comment 5

[Gregor]

Attachment: Once I click on the message in the search results, the subject is changed to the incorrect value (marked red).

Comment 6

[bindereif]

I solved it now with right click on the folder, properties and "Repair Folder".
But i guess this is only a short-time solution.

Comment 7

[bindereif]

A colleague had the same problem:
"e-mail A (from a customer) is rendered with the subject line of e-mail B (an internal encrypted e-mail). After replying to e-mail A, I realized the subject of my reply is "Re: <subject of e-mail B>". This however is not a just rendering bug, the e-mail was actually sent with the wrong subject (I verified by logging into Strato in the browser)."

Comment 8

[Philipp Wendler]

Seems to be the same as bug1844149 and bug1860805.

Comment 9

[librelegal]

As this bug is a duplicate of https://bugzilla.mozilla.org/show_bug.cgi?id=1844149 let us please continue at https://bugzilla.mozilla.org/show_bug.cgi?id=1844149. I do not have the rights to edit accordingly, so someone please do

Comment 11

[Wayne Mery (:wsmwk)]

Reopening this bug, because bindereif writes in bug 1844149 comment 17 ...

"The Bug is still not solved with the update on Version 115.8.1 (64-Bit)
It can't be happening that I have to repair my inbox every time to avoid replying to emails that arrive at the recipient with a sensitive subject from another email.

In my case, for example, it is the subject of a previously encrypted email but the content of an external email without encryption. If I reply to the external email and don't realise beforehand that the subject doesn't belong to the email, the external person sees sensitive data such as "Onboarding first name last name". This is insane!"

Comment 12

[Wayne Mery (:wsmwk)]

bindereif, are you seeing thisin version 128?

Comment 13

[bindereif]

(In reply to Wayne Mery (:wsmwk) from comment #12)

bindereif, are you seeing thisin version 128?

no, bug should be solved :)

Comment 14

[Wayne Mery (:wsmwk)]

Thanks