back to article Remote execution flaw mars older Thunderbird versions

Developers of the Thunderbird email client are in the process of patching a vulnerability that could allow attackers to remotely execute malicious code on end users' machines, security researchers said. The flaw resides in the dtoa implementation of version 2.0.0.23 of Thunderbird, according to an advisory issued Friday by …

COMMENTS

This topic is closed for new posts.
  1. Anonymous Coward
    Anonymous Coward

    First they tell us to use Bing, now this

    After years of using Outlook Express without any problems, I switched to Thunderbird about two years ago, in no small part because of the availability of the Lightening calendar plugin.

    Now I find that the recommended upgrade to TB3 to address a significant security vulnerability will leave me without calendaring, because Lightening hasn't been upgraded to work with TB3.

    (https://addons.mozilla.org/en-US/thunderbird/reviews/display/2313)

    Maybe I should "upgrade" to Windows Live Mail, which now has Calendar support!

    1. The Infamous Grouse

      Lightning and TB3

      The latest nightly builds of Lightning, which are actually pretty stable, are compatible with TB3 and can be automatically maintained via an add-on if you so wish...

      https://addons.mozilla.org/en-US/thunderbird/addon/4623

      ...although having to use unofficial and/or beta software just to make TB3 do what TB2 did does seem like a step backwards.

      I had a brief dalliance with the TB3 release version and was extremely disappointed to discover that calendaring wasn't integrated as was promised so long ago. I then spent a couple of hours upgrading or replacing incompatible add-ons and tweaking away the new improved interface options in favour of the classic look before realising I was much happier sticking with the tried and trusted 2.x branch.

      Mozilla finally seem to have nailed down the five+ year old bug that gave incorrect unread message counts in newsgroups. But other than that I could see no advantage in switching from my heavily customised TB2 installation to TB3.

      I'm very underwhelmed by the whole experience.

    2. Gabor Laszlo
      Boffin

      FYI

      There is an addon (https://addons.mozilla.org/en-US/thunderbird/addon/4623) that will pull the nightly dev build of Lightning into your TB. I've been using these nightlies (actually weeklies in my case) with TB3 since the first RC without problems.

    3. Anonymous Coward
      Anonymous Coward

      Lightning - use nightly build

      Using TB3 - it's ok, Lightning nightly build and all other add ons all fine.

      Looks OK - but at present I still prefer old interface.

      Indexing takes a while on install - but faster thereafter.

      Some nice new little features - like SMTP select, still learning.

      So far - so good

  2. JC 2
    Megaphone

    @ First they tell us to use Bing...

    The 12/11 nightly build of Lightning is reported to work with TB3. Use at your own risk of course,

    http://ftp.mozilla.org/pub/mozilla.org/calendar/lightning/nightly/latest-comm-1.9.1/win32-xpi/

    Windows Live Mail? The day after I poke my eyes out with a spoon.

  3. Dan 55 Silver badge
    Go

    @AC 00:28

    Try this...

    https://addons.mozilla.org/en-US/thunderbird/addon/4623

  4. This post has been deleted by its author

    1. Anonymous Coward
      FAIL

      Works fine for me

      Maybe it's just you...

      1. This post has been deleted by its author

    2. Anonymous Coward
      FAIL

      Similar poor experience with 3

      The amount of time it spent indexing and generally hashing my hard drive to bits forced me to downgrade. Now I find that compacting folders takes an absolute age on 2, so 3 obviously fucked my profile up. Not impressed.

  5. Levente Szileszky
    FAIL

    TB3 is an UTTER BUGFEST - DO NOT UPGRADE!

    Thunderbird 3 is horrible piece of crap, full of unfinished things, freezes up all the time for as long as 20 seconds, ridiculously SLOW and a lot of MISSING FEATURES - what the heck they were thinking when they rushed this early beta-quality PoC out as final?

    ROYAL FAILURE, that is.

This topic is closed for new posts.