CVE-2008-2934
Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file that triggers a free of an uninitialized pointer.
Date published : 2008-07-18
http://www.securityfocus.com/bid/30266
http://www.mozilla.org/security/announce/2008/mfsa2008-36.html