The 3 critical flaws could let an attacker run code on the victim's computer, according to information published by the Mozilla Foundation on Tuesday. The vulnerabilities are caused by the improper handling of electronic business cards, known as vCards; overly large images in the bit map (BMP) format; & links that have host names using nonprintable characters.
Would you like to know more? Let it not be said that Mozilla is without security flaws. Though as I've said before, they also do a better job of fixing anything brought to their attention.