Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2 Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to bypass \restrictions imposed on local HTML files \ and obtain sensitive information and prompt users to write this information into a file via directory traversal sequences in a resource: URI.