CVE-2005-1575: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160.

Affected products

• Mozilla Firefox: version 0.10.1 only; version 1.0 only

Published 2005-05-14. Last modified 2026-06-16.