A vulnerability in Firefox allows remote attackers to enumerate all the configuration settings of the browser without requiring user authorization or interaction.

http://www.securiteam.com/securitynews/5MP0C2KNQS.html