security/vuxml: Add firefox CVE

By monitoring the time certain operations take, an attacker could have guessed
which external protocol handlers were functional on a user's system.