关键漏洞信息 Vulnerability Note ID: VU#141528 Original Release Date: 2006-09-20 Last Revised: 2006-10-02 Affected Products: - Firefox 1.5.0.7 - Thunderbird 1.5.0.7 - SeaMonkey 1.0.5 Vulnerability Type: Improper handling of JavaScript regular expressions Impact: Remote, unauthenticated attacker may execute arbitrary code or cause a denial-of-service condition. Solution: - Upgrade to the latest versions of the affected products. - Disable JavaScript CVSS Metrics: Severity Metric is 27.00 References: - Secunia Advisory - Mozilla Security Advisory Acknowledgements: Reported by Mozilla Foundation Security Advisory 2006-57.