CVE-2009-2662: Improper Restriction of Operations within the Bounds of a Memory Buffer

The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vector...