description: It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2.
problem types: Mailsploit part 1: From address with encoded null character is cut off in message header display
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 52.5.2, status: affected, version: unspecified, versionType: custom
}