Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Mozilla Thunderbird 1.5.0.2
Mozilla Thunderbird 1.5
Mozilla SeaMonkey 1.0.2
Mozilla SeaMonkey 1.0.1
Mozilla Seamonkey 1.0 Dev (not an official CPE)
Mozilla SeaMonkey 1.0
Mozilla Firefox 1.5.0.4
Mozilla Firefox 1.5.0.3
Mozilla Firefox 1.5.0.2
Mozilla Firefox 1.5.0.1
Mozilla Firefox 1.5
Mozilla Thunderbird 1.5.0.4