CVE-2007-1092

Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload handlers that modify the structure of a document, wich triggers memory corruption due to the lack of a finalize hook on DOM window objects.

Date published : 2007-02-26

http://www.securityfocus.com/bid/22679

http://www.securityfocus.com/archive/1/461024/100/0/threaded