Ubuntu Security Notice 920-1 – Martijn Wargers, Josh Soref, Jesse Ruderman, and Ehsan Akhgari discovered flaws in the browser engine of Firefox. It was discovered that Firefox could be made to access previously freed memory. Paul Stone discovered that Firefox could be made to change a mouse click into a drag and drop event. It was discovered that the XMLHttpRequestSpy module as used by the Firebug add-on could be used to escalate privileges within the browser.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/88226/USN-920-1.txt
Source: https://packetstormsecurity.com/files/88226/Ubuntu-Security-Notice-920-1.html