CVE-2018-5170

Name of the Vulnerable Software and Affected Versions Thunderbird ESR versions prior to 52.8 Thunderbird versions prior to 52.8

Description The issue allows an attacker to spoof the filename of an attachment, potentially leading to a user opening a remote attachment that is a different file type than expected. This is due to insufficient input validation.

Recommendations For Thunderbird ESR versions prior to 52.8, update to version 52.8 or later. For Thunderbird versions prior to 52.8, update to version 52.8 or later.