Mozilla Update Fixes Thunderbird Security Issues

Mozilla said Thursday it has launched version 2.0.0.9 of its Thunderbird email application, recommending users upgrade to the new software and saying it fixed some security issues.

Automated notifications of the update will start to push out to clients within 24 to 48 hours, the organization said in a posting. The most recent release of Thunderbird was version 2.0.0.6, but Mozilla said it "skipped a few numbers in order to catch up with Firefox," the web browser it puts out.

According to a list of Mozilla security advisories, the update fixes some issues Thunderbird had in working on the Windows platform, and also "Crashes with evidence of memory corruption." The latter issue was announced as an advisory last month, Mozilla said that after looking at evidence of memory corruption in certain circumstances, "we presume that with enough effort at least some of these could be exploited to run arbitrary code."

It added that because Thunderbird shares the browser engine with Firefox, it could be vulnerable if Javascript were enabled in mail.

The update addresses those issues.

The latest update is available for Windows, Mac and Linux platforms, Mozilla said.