A problem exists in some browsers where, via Content-Type spoofing, forcing a user to open a page and bypass the security zone is possible, allowing for execution of javascript in a local context. Software affected: Firefox 1.0, Mozilla 1.7.x, Opera 7.51 through 7.54.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35325/6502.txt
Source: https://packetstormsecurity.com/files/35325/6502.txt.html