Remote code execution in the Venkman script debugger in Mozilla Firefox prior to 2.0.0.8.
mozilla firefox