CVE-2005-1576 - The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files

Back Back to CVE browser

LOW

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files

Published May 14, 2005

2.6

LOW

CVSS 2.0

EPSS 1.12%

Description

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://secunia.com/advisories/12979
third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://secunia.com/secunia_research/2004-11/advisory/
x_refsource_MISCExploitPatchVendor Advisory
http://www.osvdb.org/16432
vdb-entryx_refsource_OSVDBExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1579
Advisory

Link	Providers	Tags
http://secunia.com/advisories/12979		third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://secunia.com/secunia_research/2004-11/advisory/		x_refsource_MISCExploitPatchVendor Advisory
http://www.osvdb.org/16432		vdb-entryx_refsource_OSVDBExploitVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1579		Advisory