Vulnerability enabling creation of arbitrary files with javascript

Also found at: https://bugzilla.mozilla.org/show_bug.cgi?id=290036
Seems to be fixed in official Firefox 1.0.3. Reproducable on Hoary with
mozilla-firefox 1.0.2-0ubuntu5 using the example from
http://www.mikx.de/firelinking/#. It is easy to modify this to create ~/.profile
with malicious content which might make all your harddisk space problems to go
away on next login.

http://www.mikx.de/firelinking/#: http://www.mikx.de/firelinking/#