CVEvulnerability
CVE-2005-1576
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-05-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.
Affected configurations
• mozilla firefox 0.10.1
• mozilla firefox 1.0
References
- http://secunia.com/advisories/12979 Exploit, Patch, Vendor Advisory
- http://secunia.com/secunia_research/2004-11/advisory/ Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/16432 Exploit, Vendor Advisory
- http://secunia.com/advisories/12979 Exploit, Patch, Vendor Advisory
- http://secunia.com/secunia_research/2004-11/advisory/ Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/16432 Exploit, Vendor Advisory