Mozilla Firefox before 2.0.0.15 Thunderbird 2.0.0.14 and earlier and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary code via an XUL document that includes a script from a chrome: URI that points to a fastload file related to this file's \privilege level.\