Mozilla Double Download .lnk Vulnerability
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice which overwrites the file that was referenced in the first .LNK file.
- Microsoft Windows Server 2003
- Microsoft Windows XP
- Microsoft Windows 2000
- Microsoft Windows NT
- Mozilla Thunderbird
- Mozilla Firefox