CVE-2004-2227 — Information Loss or Omission in Mozilla Firefox

CWE-221 — Information Loss or Omission3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.9%
top 24.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedDec 31
Latest updateApr 29

Description

Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmozilla/firefox7 versions+6

Patches

Patch: secunia.com ↗Patch: secunia.com ↗Patch: security.gentoo.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-655m-g765-53v3: Mozilla Firefox before 1↗2022-04-29
▶

📐Framework References

1
CWE
Information Loss or Omission↗
▶