CVE-2009-1839

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.11

Description: The issue allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document. This is achieved through a "file-URL-to-file-URL scripting" attack, where an incorrect principal is associated with a file: URL loaded through the location bar.

Recommendations: For versions prior to 3.0.11, update to version 3.0.11 or later to resolve the issue.