Firefox 1.5 suffers from a denial of service condition when a large topic gets saved automatically to the history.dat file. This only works on a small amount of the Firefox 1.5 users, and it is not apparent that the problem is a buffer overflow. More information available here.
3d991f748dc673714c5369f8086f4bf5f038dbbf3f4bc4b0bd6ef6e9f4bc3074