CVE-2004-2227

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions.

Ссылки

http://secunia.com/advisories/13144
Patch
Vendor Advisory
http://secunia.com/advisories/13724
Patch
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200501-03.xml
Patch
Vendor Advisory
http://www.osvdb.org/11591
Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=234416
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18016
http://secunia.com/advisories/13144
Patch
Vendor Advisory
http://secunia.com/advisories/13724
Patch
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200501-03.xml
Patch
Vendor Advisory
http://www.osvdb.org/11591
Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=234416
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18016

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00887

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-2227

debian

почти 21 год назад

Mozilla Firefox before 1.0 truncates long filenames in the file downlo ...

GHSA-655m-g765-53v3

github

больше 3 лет назад