Secunia Security Advisory – Jesse Ruderman has reported a security issue in Mozilla and Mozilla Firefox, allowing malicious websites to trick users into accepting security dialog boxes. The problem is that it may be possible to trick users into typing or clicking on a XPInstall / Security dialog box, using various interactive events, without the user noticing the dialog box. Successful exploitation may allow a malicious website to perform tasks that require user interaction. This has been fixed in Mozilla 1.7 and Mozilla Firefox 0.9.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33727/sa11999.txt
Source: https://packetstormsecurity.com/files/33727/Secunia-Security-Advisory-11999.html