The vulnerability is said to affect versions 3.5 and 3.6 of Firefox. Malware is being actively exploited by cybercriminals to distribute malware. Mozilla says it is working on a fix, but in the meantime Firefox users might be wise to turn JavaScript off and use the popular browser instead of using it. The vulnerability was previously unknown, but it is now being exploited by the Nobel Peace Prize website, which is issuing protection against the malware as Troj/Belmoo-A. It’s possible other websites may also be serving up the vulnerability.”]
Source: https://grahamcluley.com/firefox-hit-critical-zeroday-vulnerability/