CVE-2008-4059

The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to a SCRIPT element.

Date published : 2008-09-24

http://www.securityfocus.com/bid/31346

http://download.novell.com/Download?buildid=WZXONb-tqBw~