CIA use XML vulnerability of firefox and operating system !
BUT THERE is workoround solution !
In operating system change FILE ASSOCIATION OF XML with program that not support this kind of files
for example vlc , ffplay - part of ffmpeg
In firefox you will have to manualy point exact location of program that will deal with xml files
https://imgsh.net/i/dc90d7a48f
