Mozilla Firefox/Thunderbird/SeaMonkey 'file://' URI Security Bypass Vulnerability

Mozilla Firefox/Thunderbird/SeaMonkey 'file://' URI Security Bypass Vulnerability

References:

Mozilla Homepage (Mozilla Foundation)
ASA-2009-231 firefox security update (RHSA-2009-1095) (Avaya)
MFSA 2009-30: Incorrect principal set for file: resources loaded via location ba (Mozilla)
Solution 264308: Multiple Security Vulnerabilities in Firefox (Sun)

Privacy Statement
Copyright 2010, SecurityFocus