3.0.7

DATE	CVE	VULNERABILITY TITLE	RISK
2009-04-02	CVE-2009-1232	Improper Input Validation vulnerability in Mozilla Firefox Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. network mozilla CWE-20	4.3
2009-03-27	CVE-2009-1169	Resource Management Errors vulnerability in Mozilla Firefox The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform. network mozilla CWE-399 critical	9.3
2009-03-23	CVE-2009-1044	Resource Management Errors vulnerability in Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009. network mozilla microsoft CWE-399 critical	9.3