CVE-2005-0591: Mozilla Firefox

Low severity, CVSS 2.6. EPSS: 2% chance of exploitation in the next 30 days.

Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick users into executing script or downloading and executing a file, aka "Firespoofing."

Affected products

• Mozilla Firefox: version 0.8 only; version 0.9 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.10 only; …

Published 2005-05-02. Last modified 2026-06-16.