DoctorDoom
01-20-2006, 06:02 AM
For those who use Thunderbird for email ...
Secunia Research has discovered a vulnerability in Thunderbird, which can be exploited by malicious people to trick users into executing arbitrary programs.
The vulnerability is caused due to attachments not being displayed correctly in mails. This can be exploited to spoof the file extension and the associated file type icon via a combination of overly long filenames containing whitespaces and "Content-Type" headers not matching the file extension.
Successful exploitation may lead to malware being saved to e.g. the desktop.Mozilla Thunderbird Attachment Spoofing Vulnerability (http://secunia.com/advisories/15907/)
It's rated "less critical" by Secunia, but any security hole needs to be filled.
Secunia Research has discovered a vulnerability in Thunderbird, which can be exploited by malicious people to trick users into executing arbitrary programs.
The vulnerability is caused due to attachments not being displayed correctly in mails. This can be exploited to spoof the file extension and the associated file type icon via a combination of overly long filenames containing whitespaces and "Content-Type" headers not matching the file extension.
Successful exploitation may lead to malware being saved to e.g. the desktop.Mozilla Thunderbird Attachment Spoofing Vulnerability (http://secunia.com/advisories/15907/)
It's rated "less critical" by Secunia, but any security hole needs to be filled.