Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mozilla-thunderbird: GUI display truncation vulnerability

Package(s):

mozilla-thunderbird

CVE #(s):

CVE-2006-0236

Created:

January 26, 2006

Updated:

February 1, 2006

Description:

Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 have a GUI display truncation vulnerability. A user can be tricked into downloading a maliciously created attachment with a hidden filename extension and potentially execute the dangerous payload.

Alerts:

Mandriva

MDKSA-2006:021

2006-01-25

(Log in to post comments)