Firefox 3.5 escape() Return Value Memory Corruption | Metasploit Module