Threats tagged 'ghsa-q7fj-77gc-45xq'

A vulnerability in Thunderbird before versions 128.11.1 and 139.0.2 allows crafted HTML emails using mailbox:/// links to trigger automatic, unsolicited downloads of PDF files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This can be exploited to exhaust disk space or leak Windows credentials via SMB links. User interaction is required to download the PDF, but visual obfuscation can hide the trigger. Viewing the email in HTML mode loads external content, enabling the issue.