Netscape flaw exposes hard drives

[lokem]

Not sure how many of you guys here are using Netscape/Mozilla. Here's some disturbing info:

Netscape flaw exposes hard drives
By Matthew Broersma
ZDNet (UK)
May 1, 2002, 4:50 AM PT

http://zdnet.com.com/2100-1104-896099.html

An Israeli software firm has discovered a flaw in Netscape and Mozilla software that allows code hidden in a Web page to read files from the user's PC. The bug is a more serious variant of one patched in Microsoft's Internet Explorer in February.

GreyMagic Software reported that the problem affects XMLHttpRequest, which allows Web pages in the browser to send and receive XML data via HTTP, the standard Web transfer protocol. XML is an Internet language for describing just about any sort of data.

Edit: Here's the link to the said bug:

http://bugzilla.mozilla.org/show_bug.cgi?id=141061

It appears to be fixed. But not sure which nightly version has the fix though.

Edit 2: Darn, this has been posted on the frontpage. My fault for not checking earlier...