Description
Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.
References
- 10478 vdb-entry
- 1011501 vdb-entry
- 11311 vdb-entry
- 12708 third-party-advisory
- http://www.mozilla.org/projects/security/older-vulnerabilities.html#firefox0.10.1
- https://bugzilla.mozilla.org/show_bug.cgi?id=259708