Mandriva Linux Security Advisory – GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-complicit attackers to execute arbitrary code via an attachment with a filename containing a large number of spaces ending with a dangerous extension that is not displayed by Thunderbird, along with an inconsistent Content-Type header, which could be used to trick a user into downloading dangerous content by dragging or saving the attachment.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43429/MDKSA-2006-021.txt
Source: https://packetstormsecurity.com/files/43429/Mandriva-Linux-Security-Advisory-2006.021.html