I wondered why my installation of Firefox updated itself. Now I know.

The latest update to the open-source browser shores up a number of security risks, including some that Mozilla says could be exploited by an attacker to run commands on a vulnerable computer. But the flaws still affect the current Thunderbird release, 2.0.0.19.

One of the bugs involves a library used for PNG images, and could presumably be triggered by a poisoned image on a Web page. The second would be harder to exploit, as its description says you’d have to reload a page specially crafted to target a memory management flaw to get hit.

I hope Thunderbird updates itself soon.

Comments are closed.