Security Advisory
CVE-2018-5170
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.