A vulnerability has been reported in the Wizz RSS News Reader extension for Mozilla Firefox, which can be exploited by malicious people to compromise a vulnerable system.

Certain input is not properly sanitised before being used and can be exploited to e.g. execute arbitrary script code within the "chrome:" context.

Successful exploitation requires that a user is tricked into loading a specially crafted RSS feed.

The vulnerability is reported in versions prior to 2.1.9.

Solution
Update to version 2.1.9.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits N-CIRT Lab.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Wizz RSS News Reader:
https://addons.mozilla.org/en-US/firefox/addon/424

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers