Mozilla Firefox 1.5.0.1 / Camino 1.0 - Null Pointer Dereference Crash

<!--
o Credits:
=========

Simon MOREL <izimask@thehackademy.net> http://www.sysdream.com - Reported
	Camino Browser issue.
Thomas Waldegger <bugtraq@morph3us.org>
BuHa-Security Community - http://buha.info/board/

If you have questions, suggestions or criticism about the advisory feel
free to send me a mail. The address 'bugtraq@morph3us.org' is more a
spam address than a regular mail address therefore it's possible that
some mails get ignored. Please use the contact details at
http://morph3us.org/ to contact me.

Greets fly out to cyrus-tc, destructor, nait, rhy, trappy and all
members of BuHa.

Advisory online:
http://morph3us.org/advisories/20060412-firefox-1501.txt -->

          <legend>
            <kbd>
                <object>
                  <h4>
                </object>
            </kbd>

# milw0rm.com [2006-04-13]