CVE-2005-1575

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-14

Last modified

2024-09-16

Affected products

• Firefox (Mozilla)

References

• http://secunia.com/advisories/12979
• http://secunia.com/secunia_research/2004-11/advisory/
• http://www.osvdb.org/16431