Mozilla Products Javascript String Replace Method Buffer Overflow

This strike exploits a vulnerability within Mozilla Firefox and Seamonkey. If the javascript String Replace method is passed both arguments that match the substring, and that string contains a '$' character, the replace operation is not performed properly. This causes a large string calculation that results in a buffer overflow.