The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla
Suite before 1.7.7 allows remote attackers to gain privileges by
overriding certain properties or methods of DOM nodes, as demonstrated
using multiple attacks involving the eval function or the Script
object.