Mozilla has fixed multiple vulnerabilities in the Thunderbird email client.

Version 2.0.0.16 fixes eight vulnerabilities, six of which are rated as moderate. The moderate flaws cover code execution risks (in a CSS reference counter and ScriptLoader component of Thunderbird) and memory corruption flaws.

The CSS reference counter flaw was addressed in a security update for Firefox (version 2.0.0.16) published last week. JavaScript is integral to exploit the bug but the technology isn't enabled by default on Thunderbird hence the lowered security writing on the email client.

Firefox 2.0.0.16 is defined as a critical update but Thunderbird 2.0.0.16 is less important.

Nonetheless, security watchers at the Internet Storm Centre advise Thunderbird users to apply to security and stability update sooner rather than later. ®

2 comments posted — Comment period finished