Vulnerability in Mozilla Firefox

CVE-2006-0293

The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via user-defined methods that trigger garbage collection in a way that operates on freed objects.

EPSS: 0.037 (88.7th percentile) — read the EPSS interpretation.

Affected products

References