CVE:CVE-2009-3007
CNNVD:CNNVD-200908-472
Mozilla多个浏览器存在任意文件查看漏洞。Mozilla Firefox 和SeaMonkey 以及Flock 允许见机行事的攻击者借助带有一个相对URI的window.open，欺骗地址栏在用户访问的网站上显示任意的文件:URL。如果用户被骗而访问了任意的文件:URL，就会触发该漏洞。
solution:Upgrade flock flock to a higher version than 2.5.1,and avoid the version 2.5.1; Upgrade mozilla firefox to a higher version than 3.5.1,and avoid the version 3.5.1; Upgrade mozilla seamonkey to a higher version than 1.1.7,and avoid the version 1.1.7