Red Hat Enterprise: RHSA-2012:0079-01 Critical: Firefox Security Issue

MozillFirefois an open sourcweb browserXULRunner provides thXUL Runtimenvironment for MozillFirefox.
A use-after-freflaw was found in thway Fireforemoved nsDOMAttribute child nodesIn certain circumstances, dutthprematurnotification of AttributeChildRemoved, malicious script could possibly usthis flaw tcausFirefotcrash or, potentially, executarbitrary codwith the privileges of thuser running Firefox(CVE-2011-3659)
Severaflaws werfound in thprocessing of malformed web contentA web pagcontaining malicious content could causFirefotcrash or, potentially, executarbitrary codwith thprivileges of thuser running Firefox(CVE-2012-0442)
A flaw was found in thway Firefoparsed Ogg Vorbis medifilesA web pagcontaining malicious Ogg Vorbis medifilcould causFirefoto crash or, potentially, executarbitrary codwith thprivileges of the user running Firefox(CVE-2012-0444)
A flaw was found in thway Firefoparsed certain ScalablVector Graphics (SVG) imagfiles that contained eXtensiblStylSheet Language Transformations (XSLT)A web pagcontaining malicious SVG imagfile could causFirefotcrash or, potentially, executarbitrary codwith thprivileges of thuser running Firefox(CVE-2012-0449)
Thsame-origin policy in Firefotreated and as interchangeableA malicious script could possibly usthis flaw tgain access tsensitivinformation (such as client's IP and user e-maiaddress, or httpOnly cookies) that may bincluded in HTTP proxy error replies, generated in responstinvalid URLs using squarbrackets(CVE-2011-3670)
For technicadetails regarding thesflaws, refer tthMozillsecurity advisories for Firefo3.6.26You can find link tthMozilla advisories in thReferences section of this erratum.
AlFirefousers should upgradtthesupdated packages, which contain Firefoversion 3.6.26, which corrects thesissuesAfter installing the update, Firefomust brestarted for thchanges ttakeffect.