Secunia

Jeremy Brown has discovered a security issue in Mozilla Firefox, which can be exploited by malicious, local users to manipulate certain data.

The security issue is caused due to the browser using a fixed path from the /tmp directory when a user opens a file downloaded for opening from the "Downloads" window. This can be exploited to trick a user into opening a file with potentially malicious content by placing it in the /tmp directory before the download takes place.

The security issue is confirmed in version 3.5.2 for Linux. Other versions may also be affected.

Solution
Update to version 3.0.15 or 3.5.4.

Provided and/or discovered by
Jeremy Brown

Changelog
Further details available in Customer Area

Original Advisory
Mozilla Foundation:
http://www.mozilla.org/security/announce/2009/mfsa2009-53.html

Jeremy Brown:
http://jbrownsec.blogspot.com/2009/09/vamos-updates.html
http://jbrownsec.blogspot.com/2009/10/firefox-local-download-manager.html

Deep Links
Links available in Customer Area