Mozilla has released Firefox 3.6.11 with patches for a dozen security holes. Five of the bulletins are rated critical, meaning that those vulnerabilities can be exploited to run attacker code and install software, requiring no user interaction beyond normal browsing. The update is being shipped via the browser s auto-update mechanism. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited.
Source: https://threatpost.com/firefox-dirty-dozen-mozilla-fixes-critical-browser-flaws-102010/74590/