CVE-2006-0294

Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element’s style from position:relative to position:static, which causes Gecko to operate on freed memory.

Date published : 2006-02-02

http://www.securityfocus.com/bid/16476

http://www.mozilla.org/security/announce/2006/mfsa2006-02.html