CVE-2005-0141

Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" that are middle-clicked by the user to be opened in a new tab.

Date published : 2005-01-29

http://www.securityfocus.com/bid/12407

http://www.mozilla.org/security/announce/mfsa2005-01.html