PT-2005-2555 · Mozilla · Firefox

Publicado 2005-05-12 · Atualizado 2008-09-05 · CVE-2005-1576

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 0.10.1 through 1.0

Description The issue concerns the file download dialog in Mozilla Firefox, which uses the Content-Type HTTP header to determine the file type but saves the original file extension when "Save to Disk" is selected. This allows remote attackers to hide the real file types of downloaded files.

Recommendations For Mozilla Firefox versions 0.10.1 through 1.0, consider updating to a newer version that addresses this issue, as the current behavior could lead to users unknowingly downloading malicious files.

Exploit

Correção

Identificadores relacionados

CVE-2005-1576

Produtos afetados

Firefox

Referências · 4

• 🔥 http://secunia.com/secunia_research/2004-11/advisory · Exploit
• 🔥 http://osvdb.org/16432 · Exploit
• 🔥 http://secunia.com/advisories/12979 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1576 · Nota de Segurança