Lucene search

K
mozillaMozilla FoundationMFSA2007-08
HistoryFeb 25, 2007 - 12:00 a.m.

onUnload + document.write() memory corruption — Mozilla

2007-02-2500:00:00
Mozilla Foundation
www.mozilla.org
21

0.967 High

EPSS

Percentile

99.7%

Michal Zalewski reported a memory corruption vulnerability in Firefox 2.0.0.1 involving mixing the onUnload event handler and self-modifying document.write() calls. This flaw was introduced in Firefox 2.0.0.1 and 1.5.0.9 and does not affect earlier versions; it is fixed in Firefox 2.0.0.2 and 1.5.0.10