The download spoofing flaw was reported by security firm Secunia this week. This flaw could allow a malicious user to make a downloaded file appear to be coming from a different source than it actually is, which could be used to trick users into downloading something that they're not expecting.

Bugzilla, Mozilla's bug tracking system, has assigned repair responsibility to Mozilla staffer Ben Goodger. According to Mozilla, the bug carries a "normal" severity rating; Secunia has currently rated it as "less critical." Users are warned not to download material from untrusted sources.