Secunia

Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to manipulate certain data, bypass certain security restrictions, and potentially compromise a user's system.

For more information:
SA38608

1) A use-after-free error related to the "select" event handler for XUL tree items may be exploited to execute arbitrary code.

Solution
Update to version 3.5.9. Set the "security.ssl.require_safe_negotiation" preference to "true".

Provided and/or discovered by
1) regenrecht, reported via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
Mozilla:
http://www.mozilla.org/security/announce/2010/mfsa2010-16.html
http://www.mozilla.org/security/announce/2010/mfsa2010-17.html
http://www.mozilla.org/security/announce/2010/mfsa2010-18.html
http://www.mozilla.org/security/announce/2010/mfsa2010-19.html
http://www.mozilla.org/security/announce/2010/mfsa2010-20.html
http://www.mozilla.org/security/announce/2010/mfsa2010-22.html
http://www.mozilla.org/security/announce/2010/mfsa2010-23.html
http://www.mozilla.org/security/announce/2010/mfsa2010-24.html

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-10-050/

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area