First published: Thu May 12 2005(Updated: )
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | =0.10.1 | |
Mozilla Firefox | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1576 has been classified as a moderate severity vulnerability due to the potential for misleading file types.
To fix CVE-2005-1576, update your Mozilla Firefox to a version higher than 1.0.
CVE-2005-1576 affects Mozilla Firefox versions 0.10.1 and 1.0.
The main risk of CVE-2005-1576 is that it allows attackers to disguise malicious files under misleading extensions.
CVE-2005-1576 specifically identifies a vulnerability in the Windows versions of Mozilla Firefox.