Secunia

Two vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to compromise a user's system.

1) A vulnerability is caused due to an error in the JIT (Just-in-Time) compiler when returning from e.g. an "escape()" function and can be exploited to trigger a memory corruption.

Successful exploitation allows execution of arbitrary code.

This vulnerability is confirmed in version 3.5. Prior versions may also be affected.

2) An error in the handling of Flash objects when navigating to another page can potentially be exploited to trigger a call to a deleted object and potentially execute arbitrary code.

Solution
Update to version 3.5.1.

Provided and/or discovered by
1) * SBerry (Simon Berry-Byrne)
* The vendor credits zbyte.
2) The vendor credits Attila Suszter.

Changelog
Further details available in Customer Area

Original Advisory
SBerry:
http://milw0rm.com/exploits/9137

Mozilla:
http://blog.mozilla.com/security/2009/07/14/critical-javascript-vulnerability-in-firefox-35/
http://www.mozilla.org/security/announce/2009/mfsa2009-41.html
http://www.mozilla.org/security/announce/2009/mfsa2009-35.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area