Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8 Thunderbird before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corruption or assert errors.