Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors, related to a "flash bug."
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00909.html