Mandriva Linux Security Advisory 2009-236 – Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors. Various other vulnerabilities were also addressed.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81474/MDVSA-2009-236.txt
Source: https://packetstormsecurity.com/files/81474/Mandriva-Linux-Security-Advisory-2009-236.html