The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox | Mozilla | 8.0 (including) | 8.0 (including) |
| Seamonkey | Mozilla | 2.5 (including) | 2.5 (including) |
| Thunderbird | Mozilla | 8.0 (including) | 8.0 (including) |