 | Thunderbird 2.0.0.14 E-mail client available |  |
Posted: 05/02/2008 11:38 AM |
|
|
|
|
|
| Site Admin |
| Posts |
49593 |
| Word Cnt. |
2,756,445 |
| BDay |
Apr 22 |
| Sign |
Taurus |
| Sex |
 |
|
|
|
Joined: Sep 25, 2004
Local time: 12:31 PM
Location: Texas
|

|
|
|
|
 |
Just two weeks after Firefox 2.0.0.14 was released, an updated version of the Thunderbird email client is now also ready for download. The new version closes two security holes through which attackers can inject malicious code.
Both vulnerabilities are related to JavaScript, although it is disabled by default in Thunderbird and the Mozilla developers explicitly warn against activating it. Security advisory MFSA2008-15 discusses crashes leading to memory corruption making it possible to execute infiltrated code. Vulnerability report MFSA2008-14 explains how attackers using crafted JavaScript can escalate their privileges and execute arbitrary code.
The update can be automatically downloaded and installed by clicking on the "Check for updates" option in the Help menu, but an updated version of the complete installer is also available on the Mozilla servers. Thunderbird users should import the update as soon as possible. Linux distributors are also likely to be supplying updated packages shortly.
http://www.heise-online.co.uk/security/Thunderbird-2-0-0-14-E-mail-cli ent-available--/news/110658
 |
|
|
 |
 |
| Back to Top |
|
|
 |
 | Information |  |
Welcome to RCF - WHF Forum Index
-> Talk PC
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
All times are GMT - 5 Hours
Page 1 of 1
Add To Bookmarks
|
|
|
|
|