Debian Security Advisory 1344-1 – “moz_bug_r_a4” discovered that a regression in the handling of “about:blank” windows used by addons may lead to an attacker being able to modify the content of web sites. Jesper Johansson discovered that missing sanitizing of double-quotes and spaces in URIs passed to external programs may allow an attacker to pass arbitrary arguments to the helper program if the user is tricked into opening a malformed web page.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/58329/dsa-1344-1.txt
Source: https://packetstormsecurity.com/files/58329/Debian-Linux-Security-Advisory-1344-1.html