Description
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.
References
- oval:org.mitre.oval:def:100037 vdb-entry signature
- 12659 vdb-entry
- 19823 third-party-advisory
- http://www.mozilla.org/security/announce/mfsa2005-21.html
- SUSE-SA:2006:022 vendor-advisory