Brendan

The E4X implementation exposes the internal `AnyName` object to external interfaces, allowing multiple cooperating domains to exchange information in violation of the same origin restrictions.

The issue allows remote attackers to read portions of heap memory in a Javascript string. This is achieved via the lambda replace method in the `find replen` function.

Name of the Vulnerable Software and Affected Versions: Mozilla versions 1.4 and earlier Description: The issue allows attackers to execute native methods by modifying the string used as input to the `script.thaw` JavaScript function, which is then deserialized and executed. This is related to the `Script.prototype.freeze/thaw` functionality. Recommendations: For Mozilla versions 1.4 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.