Mozilla Foundation Security Advisory 2008-51
Title: file: URIs inherit chrome privileges when opened from chrome
Announced: November 12, 2008
Reporter: Luke Bryan
Fixed in: Firefox 3.0.4
Firefox 2 is not affected by this issue.