Igor Bukanov

O problema está relacionado a uma vulnerabilidade do tipo “use after free” no gerenciamento de janelas, permitindo que um invasor remoto possa explorar uma corrupção de heap por meio de uma página HTML maliciosa. Isso pode levar ao acesso não autorizado a dados confidenciais, à violação da integridade dos dados e à negação de serviço.

A use-after-free issue in the JSON.stringify method might allow remote attackers to execute arbitrary code via unspecified vectors related to the `js HasOwnProperty` function and garbage collection.

The issue allows remote attackers to cause a denial of service, which includes memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

The issue is related to multiple unspecified vulnerabilities in the JavaScript engine, which can be exploited by remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.11 Thunderbird versions prior to 2.0.0.22 SeaMonkey versions prior to 1.1.17 Description: The issue allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via certain vectors. These vectors are related to `js LeaveSharpObject`, `ParseXMLSource`, and a certain assertion in `jsinterp.c`. Recommendations: For Mozilla Firefox versions prior to 3.0.11, update to version 3.0.11 or later. For Thunderbird versions prior to 2.0.0.22, update to version 2.0.0.22 or later. For SeaMonkey versions prior to 1.1.17, update to version 1.1.17 or later.

The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also trigger memory corruption. This is achieved through vectors involving the `js FindPropertyHelper` function, which is related to the definitions of `Math` and `Date`, as well as the `js CheckRedeclaration` function.

The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also trigger memory corruption. This is achieved through specific vectors involving `JSOP DEFVAR` and properties that lack the `JSPROP PERMANENT` attribute.

The issue is related to the layout engine and can be exploited by remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

The issue is related to the JavaScript engine and can be exploited by remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

The issue allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via certain vectors, including large switch statements, specific uses of `watch` and `eval`, and certain uses of the `mousedown` event listener.

The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption in the JavaScript engine.

The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain vectors that trigger memory corruption in the JavaScript engine.

The issue affects the JavaScript engine, allowing remote attackers to cause a denial of service, which may result in memory corruption and a crash, and possibly execute arbitrary code. The exact attack vectors are unknown.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 1.5.0.8 Thunderbird versions prior to 1.5.0.8 SeaMonkey versions prior to 1.0.6 Description: The issue is related to multiple unspecified vulnerabilities in the JavaScript engine. These vulnerabilities can be exploited by remote attackers to cause a denial of service, potentially leading to a crash, and may also allow the execution of arbitrary code. The exploitation is triggered by unspecified vectors that result in memory corruption. Recommendations: For Mozilla Firefox versions prior to 1.5.0.8, update to version 1.5.0.8 or later. For Thunderbird versions prior to 1.5.0.8, update to version 1.5.0.8 or later. For SeaMonkey versions prior to 1.0.6, update to version 1.0.6 or later.

The issue is related to the Javascript engine, which might allow remote attackers to execute arbitrary code. This is due to vectors involving garbage collection that causes deletion of a temporary object that is still being used.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.x before 1.5 Mozilla Thunderbird versions 1.x before 1.5 and 1.0.x before 1.0.8 Mozilla Suite versions prior to 1.7.13 SeaMonkey versions prior to 1.0 Description: The issue is related to the JavaScript engine's handling of temporary variables that are not properly garbage collected. This could potentially allow remote attackers to trigger operations on freed memory, leading to memory corruption. Recommendations: For Mozilla Firefox versions 1.x before 1.5, update to version 1.5 or later. For Mozilla Thunderbird versions 1.x before 1.5, update to version 1.5 or later. For Mozilla Thunderbird versions 1.0.x before 1.0.8, update to version 1.0.8 or later. For Mozilla Suite versions prior to 1.7.13, update to version 1.7.13 or later. For SeaMonkey versions prior to 1.0, update to version 1.0 or later.

The issue is related to the Javascript interpreter in Mozilla and Firefox, which does not properly dereference objects. This can be exploited by remote attackers to cause a denial of service, resulting in a crash, or to execute arbitrary code. The attack vectors are related to garbage collection, although the specifics are not detailed.

The issue is related to the function allocation code in Firefox, specifically the js NewFunction in jsfun.c, which allows attackers to cause a denial of service and possibly execute arbitrary code. This is achieved through user-defined methods that trigger garbage collection in a way that operates on freed objects.