Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expression.
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Mozilla Firefox 3.6.14
Mozilla Firefox 3.6.20
Mozilla Firefox 3.6.12
Mozilla Firefox 3.6.3
Mozilla Firefox 3.6.15
Mozilla Firefox 3.6.6
Mozilla Firefox 3.6.13
Mozilla Firefox 3.6.17
Mozilla Firefox 3.6.8
Mozilla Firefox 3.6.21
Mozilla Firefox 3.6.10
Mozilla Firefox 3.6.9
Mozilla Firefox 3.6.4
Mozilla Firefox 3.6.7
Mozilla Firefox 3.6.22
Mozilla Firefox 3.6.11
Mozilla Firefox 3.6
Mozilla Firefox 3.6.18
Mozilla Firefox 3.6.16
Mozilla Firefox 3.6.19
Mozilla Firefox 3.6.2