Mozilla has issued 10 Firefox patches, including three for critical vulnerabilities.

One of the critical vulnerabilities, MFSA 2008-06, is a problem in the way the browser handles images on certain web pages.

It's possible to exploit the flaw to steal a person's web browsing history, forward that information and then crash the browser. It may also be possible to run arbitrary code on a machine, Mozilla said.

A second critical vulnerability can enable a privilege escalation attack or remote code execution.

The last critical problem involves a memory corruption flaw that "we presume that with enough effort at least some of these could be exploited to run arbitrary code," Mozilla said.

Also notable is a fix for a problem with Mozilla's "chrome" protocol, which is the term Mozilla uses for its user interface. The problem involves some of Firefox's add-ons, or applications that users can download which extend browser functionality.

The vulnerability would let an attacker determine what applications are installed on a person's PC, which could give clues to how the machine could be compromised, Mozilla said. However, a victim would have to be lured to a special malicious web page designed to take advantage of the flaw.