CVE-2005-1576 - The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files

Back Back to CVE browser

LOW

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files

Published May 14, 2005

2.6

LOW

CVSS 2.0

EPSS 1.12%

Description

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://secunia.com/advisories/12979
third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://secunia.com/secunia_research/2004-11/advisory/
x_refsource_MISCExploitPatchVendor Advisory
http://www.osvdb.org/16432
vdb-entryx_refsource_OSVDBExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1579
Advisory

Link	Providers	Tags
http://secunia.com/advisories/12979		third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://secunia.com/secunia_research/2004-11/advisory/		x_refsource_MISCExploitPatchVendor Advisory
http://www.osvdb.org/16432		vdb-entryx_refsource_OSVDBExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1579		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 14, 2005

Updated Sep 16, 2024

Reserved May 14, 2005

Link CVE-2005-1576

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-1576

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 14, 2005

Updated Sep 16, 2024

Link EUVD-2005-1579

GitHub

No data