Mozilla Firefox 1.5.0.1 / Camino 1.0 - Null Pointer Dereference Crash

<!--
o Credits:
=========

Simon MOREL <[email protected]> http://www.sysdream.com - Reported
	Camino Browser issue.
Thomas Waldegger <[email protected]>
BuHa-Security Community - http://buha.info/board/

If you have questions, suggestions or criticism about the advisory feel
free to send me a mail. The address '[email protected]' is more a
spam address than a regular mail address therefore it's possible that
some mails get ignored. Please use the contact details at
http://morph3us.org/ to contact me.

Greets fly out to cyrus-tc, destructor, nait, rhy, trappy and all
members of BuHa.

Advisory online:
http://morph3us.org/advisories/20060412-firefox-1501.txt -->

          <legend>
            <kbd>
                <object>
                  <h4>
                </object>
            </kbd>

# milw0rm.com [2006-04-13]