Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to conduct cross-site request forgery attacks and potentially compromise a user's system.

1) A race condition when setting the "window.location" property can be exploited to generate a fake HTTP Referer header, which can be used to conduct cross-site request forgery attacks.

2) Some errors within the XBL component, the "drawImage()" function, and the "nsCSSFrameConstructor" can be exploited to cause memory corruption and potentially allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 2.0.0.10.

Solution
Update to version 2.0.0.10.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Gregory Fleischer
2) georgi, Philip Taylor, Martijn Wargers

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.mozilla.org/security/announce/2007/mfsa2007-38.html
http://www.mozilla.org/security/announce/2007/mfsa2007-39.html

Deep Links
Links available to Secunia VIM customers