The vulnerability of the Firefox browser allows a malicious attacker to trigger a service failure or execute arbitrary code.

Mozilla Firefox’s software contains a vulnerability in the function nsXBLProtoImpl::InstallImplementation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure using JavaScript, which processes XBL objects in the same way as XBL itself...