|
CVE Reference: CVE-2005-1576
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2005-1576
|
|
Description:
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.
|
|
CVE Status:
Candidate
|
|
References:
SAID
Secunia Advisory: SA12979
OSVDB
16432
MISC
http://secunia.com/secunia_research/2004-11/advisory/
|
|
|
Return to the previous page.
|
