Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.
| Software | From | Fixed in |
|---|---|---|
| mozilla / mozilla | - | 1.7.6 |
| mozilla / firefox | - | 1.0.1 |