| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 1.0.1= 1.0.2 | |
| mozilla | = 1.7.6 | |
| navigator | = 7.2 |
The find_replen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free