Comment 1 for bug 2015754

Not sure why this was changed to a security vulnerability when the bug it was marked as a duplicate of isn't, so I've set it back to a normal bug report since it doesn't appear there's any need to publish an advisory about it.