What you wrote is not a firefox attack, it's acrobat attack. You don't need Mozilla specific JS hooks to launch an Acrobat plugin - I don't even think there is such a thing.<p>Acrobat plugin opens automatically if you embed a pdf.