Mozilla Foundation Security Advisory 2007-29
Crashes with evidence of memory corruption (rv:18.104.22.168)
- October 18, 2007
- Mozilla developers and community
- Firefox, SeaMonkey, Thunderbird
- Fixed in
- Firefox 22.214.171.124
- SeaMonkey 1.1.5
- Thunderbird 126.96.36.199
- Thunderbird 188.8.131.52
As part of the Firefox 184.108.40.206 update releases Mozilla developers fixed many bugs to improve the stability of the product. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.
L. David Baron, Boris Zbarsky, Georgi Guninski, Paul Nickerson, Olli Pettay, Jesse Ruderman, Vladimir Sukhoy, Daniel Veditz, and Martijn Wargers reported crashes in the browser engine.