Mozilla 1.7.8 Firefox 1.0.4 Camino 0.8.4 Netscape 8.0.2 and K-Meleon 0.9 and possibly other products that use the Gecko engine allow remote attackers to cause a denial of service (application crash) via JavaScript that repeatedly calls an empty function.