Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-01-24 05:00
Updated : 2017-10-11 01:29
NVD link : CVE-2005-0145
Mitre link : CVE-2005-0145
CVE.ORG link : CVE-2005-0145
JSON object : View
Products Affected
mozilla
- firefox
CWE