CVE:CVE-2008-5014
CNNVD:CNNVD-200811-198
Firefox ，Thundrebird 2以及SeaMonkey 中的jslock.cpp允许远程攻击者通过有保留的修改会造成非本地文件锁定的window.__proto__.__proto__ object，来引起拒绝服务攻击(崩溃)以及可能执行任意代码 。它会触发与OBJ_IS_NATIVE函数相关的声明失败。
solution:Upgrade mozilla firefox to a higher version than 2.0.0.18,3.0.2,and avoid the version [2.0,2.0.0.18),[3.0,3.0.2); Upgrade mozilla seamonkey to a higher version than 1.1.13,and avoid the version [1.0,1.1.13); Upgrade mozilla thunderbird to a higher version than 2.0.0.18,and avoid the version [2.0,2.0.0.18); Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,7.10,8.04,8.10,and avoid the version 6.06,7.10,8.04,8.10