CVE-2005-0145 | SynScan

Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2005-0145

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.

Published: Jan 24, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-0145
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 2.6
AV:N/AC:H/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mozilla / firefox	0.8	0.8.x
mozilla / firefox	0.9.1	0.9.1.x
mozilla / firefox	0.10.1	0.10.1.x
mozilla / firefox	0.9	0.9.x
mozilla / firefox	1.0	1.0.x
mozilla / firefox	0.9.3	0.9.3.x
mozilla / firefox	0.9.2	0.9.2.x
mozilla / firefox	0.9-rc	0.9-rc.x
mozilla / firefox	0.10	0.10.x