CVE-2005-1576

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-12 · updated 2026-06-16

Description

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selected, which allows remote attackers to hide the real file types of downloaded files.

Affected products

Mozilla Firefox: 0.10.1, 1.0

References

http://secunia.com/advisories/12979
http://secunia.com/secunia_research/2004-11/advisory/
http://www.osvdb.org/16432
http://secunia.com/advisories/12979
http://secunia.com/secunia_research/2004-11/advisory/
http://www.osvdb.org/16432

Get alerted when CVE-2005-1576 or the next vulnerability affects your stack