The vulnerability is caused due to an error when downloading files and can be exploited to delete all content in the download directory (by default the user’s desktop on Windows and the user’s $HOME directory on Linux).
Successful exploitation requires that a user is tricked into clicking the “Save” button to download a file.
Solution: Update to version 0.10.1. http://www.mozilla.org/
