Mozilla · Firefox · CVE-2020-15658
**Name of the Vulnerable Software and Affected Versions**
Firefox ESR versions prior to 78.1
Firefox versions prior to 79
Thunderbird versions prior to 78.1
**Description**
The issue arises from improper handling of special characters in the file download code, allowing an attacker to alter the file type being downloaded by cutting off the file ending at an earlier position. This discrepancy can lead to a different file type being downloaded than what is shown in the dialog.
**Recommendations**
For Firefox ESR versions prior to 78.1, update to version 78.1 or later.
For Firefox versions prior to 79, update to version 79 or later.
For Thunderbird versions prior to 78.1, update to version 78.1 or later.