Multiple vulnerabilities have been reported in Mozilla Thunderbird, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system.

For more information, see vulnerabilities #1, #3, #4, #5, #6, #7, #9, #10, and #11:
SA19873

Successful exploitation of these vulnerabilities requires that JavaScript is enabled in mails (not default setting).

A boundary error has also been reported in the handling of VCard attachments. This can be exploited to cause a heap-based buffer overflow via a malicious VCard with a specially crafted base64 field that causes a crash and may allow execution of arbitrary code.

Solution
Update to version 1.5.0.5.

Provided and/or discovered by
Daniel Veditz, Mozilla.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.mozilla.org/security/announce/2006/mfsa2006-49.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers