Lucene search

K
cvelistMozillaCVELIST:CVE-2018-5170
HistoryJun 11, 2018 - 9:00 p.m.

CVE-2018-5170

2018-06-1121:00:00
mozilla
raw.githubusercontent.com

6.1 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.5%

It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.