YARR as used in Mozilla Firefox 4.x through 8.0 Thunderbird 5.0 through 8.0 and SeaMonkey before 2.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.