description: It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
problem types: Filename spoofing for external attachments
affected:
{
product: Thunderbird ESR
vendor: Mozilla
versions:
lessThan: 52.8, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 52.8, status: affected, version: unspecified, versionType: custom
}
