Yesterday, Mozilla Foundation released
Firefox 3.5.4 and
Firefox 3.0.15 in order to fix
11 new security flaws found in previous versions of the software. Of these 11 flaws, 6 are rated critical and some of these could allow an attacker to run arbitrary programs of their choosing to take control of your computer.
If you are using Firefox on a personally-owned computer, please upgrade your software as soon as possible to protect yourself from attacks against these flaws. If you are using Firefox on a VCU-owned computer, please coordinate software updates with your technical support staff.
In the meantime, disabling or blocking Javascript can protect you from some of these flaws. However, others do not require Javascript, so the only complete protection is to update your software.