Package: mozilla-thunderbird Version: 1.0.6-3 Severity: grave Tags: security
The --compose option executes shell commands: mozilla-thunderbird --compose 'mailto:`df`' The df output appears in the To: line of the message. (This is related to the recently disclosed Firefox bug, which does not seem to affect Debian thanks to a different wrapper script.) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
