CVE-2005-1576: Low severity Mozilla Firefox vulnerability
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1576?
CVE-2005-1576 has been classified as a moderate severity vulnerability due to the potential for misleading file types.
How do I fix CVE-2005-1576?
To fix CVE-2005-1576, update your Mozilla Firefox to a version higher than 1.0.
What versions of Mozilla Firefox are affected by CVE-2005-1576?
CVE-2005-1576 affects Mozilla Firefox versions 0.10.1 and 1.0.
What is the main risk associated with CVE-2005-1576?
The main risk of CVE-2005-1576 is that it allows attackers to disguise malicious files under misleading extensions.
Does CVE-2005-1576 affect other operating systems apart from Windows?
CVE-2005-1576 specifically identifies a vulnerability in the Windows versions of Mozilla Firefox.