Thunderbird Security Update To 2.0.0.17

Just a day after updating both Firefox version 3 and 2 the Mozilla Thunderbird development team released a update for Thunderbird which raises the version of the email client to 2.0.0.17.

The update is a security update and it is therefor recommended to update immediately if Thunderbird is installed and in use on a computer system.

Interested users can take a look at the release notes for the new version which contain a link to the security issues that have been fixed.

The update fixes the following two critical and five moderate security vulnerabilities that can be exploited in earlier versions of the mail client:

• MFSA 2008-46 Heap overflow when canceling newsgroup message
• MFSA 2008-44 resource: traversal vulnerabilities
• MFSA 2008-43 BOM characters stripped from JavaScript before execution
• MFSA 2008-42 Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17)
• MFSA 2008-41 Privilege escalation via XPCnativeWrapper pollution
• MFSA 2008-38 nsXMLDocument::OnChannelRedirect() same-origin violation
• MFSA 2008-37 UTF-8 URL stack buffer overflow

The update checks in the email client can be used to download the latest version. Users find that option in the Help > Check for Updates menu in Thunderbird. Everyone else can use the link posted above to download the email client Thunderbird from the official Mozilla website.