Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/13144 | Patch Vendor Advisory |
| http://secunia.com/advisories/13724 | Patch Vendor Advisory |
| http://security.gentoo.org/glsa/glsa-200501-03.xml | Patch Vendor Advisory |
| http://www.osvdb.org/11591 | Patch |
| https://bugzilla.mozilla.org/show_bug.cgi?id=234416 | Patch |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/18016 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-12-31 05:00
Updated : 2017-07-11 01:31
NVD link : CVE-2004-2227
Mitre link : CVE-2004-2227
CVE.ORG link : CVE-2004-2227
JSON object : View
Products Affected
mozilla
- firefox
CWE
