CVE-2005-0587: Medium severity Mozilla Firefox vulnerability
Published Feb 28, 2005
·Updated
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.
Affected Software
33 affected components
Mozilla Firefox=0.8
Mozilla Firefox=0.9
Mozilla Firefox=0.9-rc
Mozilla Firefox=0.9.1
Mozilla Firefox=0.9.2
Mozilla Firefox=0.9.3
Mozilla Firefox=0.10
Mozilla Firefox=0.10.1
Mozilla Firefox=1.0
Mozilla Mozilla=1.3
Mozilla Mozilla=1.4
Mozilla Mozilla=1.4-alpha
Mozilla Mozilla=1.4.1
Mozilla Mozilla=1.5
Mozilla Mozilla=1.5-alpha
Mozilla Mozilla=1.5-rc1
Mozilla Mozilla=1.5-rc2
Mozilla Mozilla=1.5.1
Mozilla Mozilla=1.6
Mozilla Mozilla=1.6-alpha
Mozilla Mozilla=1.6-beta
Mozilla Mozilla=1.7
Mozilla Mozilla=1.7-alpha
Mozilla Mozilla=1.7-beta
Mozilla Mozilla=1.7-rc1
Mozilla Mozilla=1.7-rc2
Mozilla Mozilla=1.7-rc3
Mozilla Mozilla=1.7.1
Mozilla Mozilla=1.7.2
Mozilla Mozilla=1.7.3
Mozilla Mozilla=1.7.5
Mozilla Firefox<1.0.1
Mozilla Mozilla<1.7.6
Event History
Feb 28, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0587?
CVE-2005-0587 has a moderate severity rating as it allows remote exploitation through social engineering.
2
How do I fix CVE-2005-0587?
To fix CVE-2005-0587, update to Firefox version 1.0.1 or later, or Mozilla version 1.7.6 or later.
3
What versions are affected by CVE-2005-0587?
CVE-2005-0587 affects Firefox versions before 1.0.1 and all Mozilla versions before 1.7.6.
4
Can CVE-2005-0587 lead to data loss?
Yes, CVE-2005-0587 can lead to data loss by overwriting arbitrary files on the user's system.
5
What type of attack does CVE-2005-0587 exploit?
CVE-2005-0587 exploits user interaction by tricking them into downloading a specifically crafted .LNK file.