Bzbarsky

The issue is caused by buffer overflow vulnerabilities in the browser engine, which can be exploited by a remote attacker to cause a denial of service, such as memory corruption and application crash, or possibly execute arbitrary code.

The issue is caused by a buffer overflow, potentially allowing a remote attacker to cause a denial of service or execute arbitrary code, resulting in memory corruption and application crash.

The issue is related to the lack of protection for certain data in Firefox browsers, allowing remote attackers to bypass the Same Origin Policy. This can be achieved via the `reviver` parameter to the `JSON.parse` method. The estimated number of potentially affected devices worldwide is not specified.

The issue arises from the improper identification of the `this` object during the use of user-defined getter methods on DOM proxies. This could potentially allow remote attackers to bypass intended access restrictions through vectors involving an expando object.

The issue is related to the PreserveWrapper implementation, which does not properly handle the lack of a wrapper. This allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code by leveraging unintended clearing of the wrapper cache's preserved-wrapper flag.

A use-after-free issue in the `nsContentUtils::RemoveScriptBlocker` function allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption via unspecified vectors.

The issue allows remote attackers to bypass intended access restrictions. This is due to the failure to prevent multiple wrapping of WebIDL objects.

The issue arises from improper implementation of quickstubs that use the `jsval` data type for their return values. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a compartment mismatch and application crash, via crafted JavaScript code that is not properly handled during garbage collection.

The issue arises from improper handling of "location" as the name of a frame, allowing remote attackers to bypass the Same Origin Policy via a crafted web site.

The issue is related to multiple unspecified vulnerabilities in the browser engine, allowing remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a different web site.

Name of the Vulnerable Software and Affected Versions: Mozilla Thunderbird versions prior to 2.0.0.18 SeaMonkey versions prior to 1.1.13 Description: The issue allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the `.documentURI` or `.textContent` DOM properties when JavaScript is enabled in mail. Recommendations: For Mozilla Thunderbird versions prior to 2.0.0.18, update to version 2.0.0.18 or later. For SeaMonkey versions prior to 1.1.13, update to version 1.1.13 or later.

The issue is related to the loadBindingDocument function, which does not enforce the same-domain policy, allowing remote attackers to access data from other domains using crafted XBL bindings.