Multiple vulnerabilities have been reported in Mozilla Thunderbird, which can be exploited by malicious people to conduct cross-site scripting attacks and potentially compromise a user's system.

See vulnerabilities #1 through #6 for more information:
SA23282

The following two vulnerabilities have also been reported:

1) A boundary error within the processing of mail headers can be exploited to cause a heap-based buffer overflow via an overly long "Content-Type" header in an external message body.

2) A boundary error within the processing of rfc2047-encoded headers can be exploited to cause a heap-based buffer overflow.

Solution
Update to version 1.5.0.9.

Provided and/or discovered by
1) Georgi Guninski
2) David Bienvenu

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.mozilla.org/security/announce/2006/mfsa2006-74.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers