Jun 26, 2009

Thunderbird fix seven security flaws

The Mozilla developers have a new release of the Thunderbird e-mail delivered. It is a security update that resolves seven holes, most of them in the recent update of Firefox 3.0.11 are solved. Thunderbird 2.0.0.22 solves first an error on which the developers a large impact. When a user multipart / alternative e-mail sites with a text / enhanced component may Thunderbird crash, possibly operating as a result. Furthermore, there are four errors resolved with an average impact. There were two errors that JavaScript code on a page with higher privileges running. By default, Thunderbird is not vulnerable unless the user is an add-on installed and JavaScript enabled in e-mails has. Two other errors also abuse of JavaScript and the e-mail program to crash, potentially exploitable to. The last two errors have a low impact, according to Mozilla. Users who have configured a proxy and JavaScript enabled, so the victim of malicious code when an SSL connection. Finally, an Adobe Flash file via the view-source schema is loaded circumvent restrictions. But that only works if the user has plugins enabled in e-mails. The Mozilla developers advise users of Thunderbird strongly to upgrade to version 2.0.0.22. The release notes show a list of changes. In Thunderbird 1.5.0 is no longer supported and contains known security flaws version. A general council that the developers give is never JavaScript in Thunderbird on.

For more visit - Anti Spyware Support