CVE-2009-1044

Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.

Date published : 2009-03-23

http://www.securityfocus.com/bid/34181

http://www.securityfocus.com/archive/1/502303/100/0/threaded