A vulnerability exists in the Mozilla LiveConnect that may allow a remote attacker to cause a denial of service.
The crash is due to re-use of an already-freed object and we presume this could be exploited with enough effort.
A remote, unathenticated attacker may be able to cause a denial of service.
Apply an update
This vulnerability was reported in Mozilla Foundation Security Advisory 2006-71. Mozilla credits Steven Michaud with providing information about this issue.
This document was written by Chris Taschner.
|Date First Published:||2007-01-18|
|Date Last Updated:||2007-04-05 18:44 UTC|