CVE-2005-0145: Mozilla Firefox

Low severity, CVSS 2.6. EPSS: 1% chance of exploitation in the next 30 days.

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.

Affected products

• Mozilla Firefox: version 0.8 only; version 0.9 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.10 only; …

Published 2005-01-24. Last modified 2026-06-16.