CVE-2004-2227 in Firefox

Summary

Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

07/17/2005

Disclosure

12/31/2004

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
983	Mozilla Firefox Local Image DOS Device Name denial of service	404	Not defined	Official fix	CVE-2004-2227
982	Mozilla Firefox Local Image information disclosure	200	Proof-of-Concept	Official fix	CVE-2004-2227

Sources

• MITRE
• NVD
• CVE Details