| Package | Affected versions | Patched versions |
|---|---|---|
| thunderbird | = 1.0= 1.0.1= 1.0.2= 1.0.5= 1.0.6= 1.0.7= 1.5 |
GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large number of spaces ending with a dangerous extension that is not displayed by Thunderbird, along with an inconsistent Content-Type header, which could be used to trick a user into downloading dangerous content by dragging or saving the attachment.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free