Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service. Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash...