Fixes for security problems in the JavaScript engine described in
MFSA 2008-15 (CVE-2008-1237) introduced a stability problem, where some
users experienced crashes during JavaScript garbage collection. This is being
fixed primarily to address stability concerns. We have no demonstration that
this particular crash is exploitable but are issuing this advisory because
some crashes of this type have been shown to be exploitable in the past.This regression was introduced in Firefox 2.0.0.13 and does
not affect any shipping version of Thunderbird. Thunderbird 2.0.0.14 contains
the correct fix for MFSA 2008-15, although as noted in that advisory
Thunderbird users would be vulnerable only if they had enabled JavaScript.