CVE:CVE-2008-2785
CNNVD:CNNVD-200806-285
Mozilla Firefox是美国Mozilla基金会开发的一款开源Web浏览器。
Mozilla的内部CSSValue数组数据结构对CSS对象的引用计数器使用了过小的变量， 如果攻击者对常见的CSS对象创建了大量引用的话，当浏览器试图释放仍在使用的CSS对象时计数器会被溢出，导致拒绝服务或在用户机器上执行任意指令。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.15,2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,3.0,and avoid the version (,2.0.0.15],2.0,2.0.0.1,2.0.0.2,2.0.0.3,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.7,2.0.0.8,2.0.0.9,2.0.0.10,2.0.0.11,2.0.0.12,2.0.0.13,2.0.0.14,3.0; Upgrade mozilla seamonkey to a higher version than 1.1.10,1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,and avoid the version (,1.1.10],1.0,1.0:alpha,1.0:beta,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.1,1.1:alpha,1.1:beta,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9; Upgrade mozilla thunderbird to a higher version than 2.0.0.14,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,1.0,1.0.2,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5.0.2,1.5.0.4,1.5.0.5,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.12,1.5.0.13,1.5.0.14,2.0.0.0,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.9,2.0.0.12,and avoid the version (,2.0.0.14],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,1.0,1.0.2,1.0.5,1.0.6,1.0.7,1.0.8,1.5,1.5.0.2,1.5.0.4,1.5.0.5,1.5.0.7,1.5.0.8,1.5.0.9,1.5.0.10,1.5.0.12,1.5.0.13,1.5.0.14,2.0.0.0,2.0.0.4,2.0.0.5,2.0.0.6,2.0.0.9,2.0.0.12