All articles
A vulnerability has been discovered in Mozilla Firefox that allows file manipulation. The flaw means that saved PDF content or bundled content can overwrite other PDF files on the system. A user action is required for successful exploitation.
This may sound like a narrow issue, but it becomes relevant in certain scenarios: if Firefox can be made to save content to a defined path, it can replace another file that already exists there. Combined with additional attack steps, this can lead to unwanted file operations on the system.
What You Can Do
Update Firefox to the current version. Be cautious when handling PDF files from unknown sources, including when opening them in the browser. Check whether your version is current via "Help" and "About Firefox".