CVE-2005-0587: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.

Affected products

• Mozilla Firefox: before 1.0.1 (fixed in 1.0.1)
• Mozilla Mozilla: before 1.7.6 (fixed in 1.7.6)

Published 2005-03-25. Last modified 2026-06-16.