Mozilla Suite/Firefox JavaScript Lambda Replace Heap Memory Disclosure Vulnerability

Threat level definition

Mozilla Suite/Firefox JavaScript Lambda Replace Heap Memory Disclosure Vulnerability

References:

JS "lambda" replace exposes malloc heap space after end of JS string (Brendan Eich )
K-Meleon Home Page (K-Meleon)
Mozilla Firefox (Azafran)
Mozilla Foundation Security Advisory 2005-33 - Javascript "lambda" replace (Mozilla)
Netscape Homepage (Netscape)
RHSA-2005:383-07 - firefox security update (RedHat)
RHSA-2005:384-11 - Mozilla security update (Red Hat)
RHSA-2005:386-08 - Mozilla security update (RedHat)
Security Alerts (Netscape)
SSRT5940 rev.0 - HP-UX Mozilla remote, unauthorized user may execute privileged (HP)

Privacy Statement
Copyright 2008, SecurityFocus