Secunia

A vulnerability has been discovered in the infoRSS extension for Firefox, which can be exploited by malicious people to compromise a user's system.

Input passed via RSS feeds is not properly sanitised before being used to render content. This can be exploited to execute arbitrary script code within the "chrome:" context and execute arbitrary commands on a user's system.

Successful exploitation requires that a user subscribes to a specially crafted RSS feed.

The vulnerability is confirmed in version 1.1.4.2. Other versions may also be affected.

Solution
Update to version 1.2.0 or later.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
https://addons.mozilla.org/en-US/firefox/addons/versions/361#version-1.2.0

Deep Links
Links available in Customer Area