YARR as used in Mozilla Firefox before 7.0 Thunderbird before 7.0 and SeaMonkey before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted JavaScript.