A vulnerability has been reported in Mozilla Firefox, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the handling of reference counters for CSS objects. This can be exploited to execute arbitrary code via an overly large number of references to a common CSS object

The vulnerability is reported in versions prior to Firefox 3.0.1 and 2.0.0.16, Thunderbird 2.0.0.16, and SeaMonkey 1.1.11.

Solution
Update to the fixed versions.
Further details available in Customer Area

Provided and/or discovered by
Reported via the Zero Day Initiative.

Changelog
Further details available in Customer Area

Original Advisory
MFSA 2008-34:
http://www.mozilla.org/security/announce/2008/mfsa2008-34.html

TippingPoint:
http://dvlabs.tippingpoint.com/blog/2008/06/18/vulnerability-in-mozilla-firefox-30
http://www.zerodayinitiative.com/advisories/ZDI-08-044/

Deep Links
Links available in Customer Area