Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors, related to a "flash bug."
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2473