Heap Memory Exposure in Mozilla Suite, Firefox, and Netscape

CVE-2005-0989

Summary

The find_replen function in the JavaScript engine of the affected products exposes a security weakness that allows remote attackers to read sensitive portions of the program's heap memory. This is achieved via a maliciously crafted JavaScript string utilizing the lambda replace method, potentially leading to unauthorized data exposure and the exploitation of user data.

References