FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

firefox -- javascript garbage collector vulnerability

Affected packages
firefox <,1
linux-firefox <
linux-firefox-devel <
linux-seamonkey < 1.1.10
seamonkey < 1.1.10
flock < 1.1.2
linux-flock < 1.1.2
0 < linux-seamonkey-devel
linux-thunderbird <
thunderbird <


VuXML ID 67bd39ba-12b5-11dd-bab7-0016179b2dd5
Discovery 2008-04-16
Entry 2008-04-25
Modified 2009-12-12

Mozilla Foundation reports:

Fixes for security problems in the JavaScript engine described in MFSA 2008-15 introduced a stability problem, where some users experienced crashes during JavaScript garbage collection. This is being fixed primarily to address stability concerns. We have no demonstration that this particular crash is exploitable but are issuing this advisory because some crashes of this type have been shown to be exploitable in the past.


Bugtraq ID 28818
CVE Name CVE-2008-1237
CVE Name CVE-2008-1380