The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0 Firefox ESR 31.x before 31.3 Thunderbird before 31.3 and SeaMonkey before 2.31 allows remote attackers to cause a denial of service (application crash) via a crafted JavaScript object.