Mozilla has a flaw that allows for a remote attacker to trick a user into launching an executable via the SHELL: directive.