GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large number of spaces ending with a dangerous extension that is not displayed by Thunderbird, along with an inconsistent Content-Type header, which could be used to trick a user into downloading dangerous content by dragging or saving the attachment.

GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-complicit attackers to execute arbitrary code via an attachment with a filename containing a large number of spaces ending with a dangerous extension that is not displayed by Thunderbird, along with an inconsistent Content-Type header, which could be used to trick a user into downloading dangerous content by dragging or saving the attachment.

The updated packages have been patched to correct this problem.

The remote host is using Mozilla Thunderbird, an email client. 

The remote version of this software does not display attachments correctly in emails.  Using an overly-long filename and specially crafted Content-Type headers, an attacker may be able to leverage this issue to spoof the file extension and associated file type icon and trick a user into executing an arbitrary program.

The remote host is running a vulnerable version of Mozilla Thunderbird mail client. This version of Thunderbird is vulnerable to a Man-in-the-middle (MITM) or sniffing vulnerability where an attacker can determine user credentials even when encryption is enabled.  To exploit this flaw, an attacker would need access to the local network. In addition, the client is vulnerable to a flaw where attackers can spoof attachment types.  An attacker exploiting this flaw would craft a malicious email and entice a user to open a seemingly innocuous attachment. 

ID	Name	Product	Family	Severity
20810	Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2006:021)	Nessus	Mandriva Local Security Checks	medium
20735	Mozilla Thunderbird < 1.5 Attachment Extension Spoofing	Nessus	Windows	medium
3258	Mozilla Thunderbird < 1.5 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	SMTP Clients	medium
801290	Mozilla Thunderbird < 1.5 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	high

Detections

Analytics

CVE-2006-0236

high

Tenable Plugins

medium

medium

medium

high