CVEvulnerability
CVE-2004-2227
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions.
Affected configurations
• mozilla firefox 0.8
• mozilla firefox 0.9
• mozilla firefox 0.9.1
• mozilla firefox 0.9.2
• mozilla firefox 0.9.3
• mozilla firefox 0.10
• mozilla firefox 0.10.1
Related
References
- http://secunia.com/advisories/13144 Patch, Vendor Advisory
- http://secunia.com/advisories/13724 Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200501-03.xml Patch, Vendor Advisory
- http://www.osvdb.org/11591 Patch
- https://bugzilla.mozilla.org/show_bug.cgi?id=234416 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18016 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/13144 Patch, Vendor Advisory
- http://secunia.com/advisories/13724 Patch, Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200501-03.xml Patch, Vendor Advisory
- http://www.osvdb.org/11591 Patch
- https://bugzilla.mozilla.org/show_bug.cgi?id=234416 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18016 exchange.xforce.ibmcloud.com