Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Firefox | Mozilla | 1.5 (including) | 1.5 (including) |
Firefox | Mozilla | 1.5.0.1 (including) | 1.5.0.1 (including) |
Firefox | Mozilla | 1.5.0.2 (including) | 1.5.0.2 (including) |
Firefox | Mozilla | 1.5.0.3 (including) | 1.5.0.3 (including) |
Firefox | Mozilla | 1.5.0.4 (including) | 1.5.0.4 (including) |
Seamonkey | Mozilla | 1.0 (including) | 1.0 (including) |
Seamonkey | Mozilla | 1.0.1 (including) | 1.0.1 (including) |
Seamonkey | Mozilla | 1.0.2 (including) | 1.0.2 (including) |
Thunderbird | Mozilla | 1.5 (including) | 1.5 (including) |
Thunderbird | Mozilla | 1.5.0.2 (including) | 1.5.0.2 (including) |
Thunderbird | Mozilla | 1.5.0.4 (including) | 1.5.0.4 (including) |