Open Bug 1892876 Opened 9 months ago Updated 9 months ago

Attachments are shown in wrong email if selecting other email A while large email B is decrypting

Categories

(MailNews Core :: Security: OpenPGP, defect)

Thunderbird 115
defect

Tracking

(Not tracked)

UNCONFIRMED

People

(Reporter: michaelspohn, Unassigned)

References

Details

Steps to reproduce:

When I klick on a PGP encrypted email (email A) with four JPG attachments, it takes a while to decode on an older notebook with a 4th gen i7 CPU. I then klicked on a different email B while the decryption process was still running (The message content and attachments have not yet been displayed in the overview.)

Actual results:

When I click on the encrypted email A with attachments and then click on another email B while the decryption process is still running, the attachments of the encrypted email A are displayed as attachments in the second email B. It does not matter if email B has attachments or not.

The attachments of email A can be opened as if they were attached to email B.
When forwarding the email B, only original attachments of the email B get forwarded.
When you klick on another email C (or when you wait for the end of the decryption process after klicking on email A) and then klick on email B again, the attachments are not longer displayed as attachments of email B.

Expected results:

When I klick on the encrypted email A with attachments and then klick on another email B while the decryption process is still running, the attachments of that encrypted email A should not be displayed as attachments in the email B.

Can you reproduce on beta?

Component: Untriaged → Security: OpenPGP
Product: Thunderbird → MailNews Core
See Also: → CVE-2024-1936

This behavior occurs on current stable Mozilla Thunderbird (User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:115.0) Gecko/20100101 Thunderbird/115.10.1) only if the encrypted message with attachment is not fully loaded and decrypted in "Message Pane".

Doesn't occur when the encrypted message is fully loaded and decrypted.

Even if the described behavior was reproduced and after that the encrypted message was fully loaded and decrypted, the other messages are loaded normally.

There were no errors in Error Console.

I didn't have time to test on other versions of Mozilla Thunderbird.

You need to log in before you can comment on or make changes to this bug.