An error in the way in which the Firefox and Opera browsers handle image files could allow an attacker to export a user's web history or crash the Firefox browser, a Polish researcher and US-CERT have warned.