Unscored CVE-2005-0145 EUVD-2005-0146GHSA-2fgh-m45q-cgrh

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Ja…

Published Jan 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=265176
12407 vdb-entry
mozilla-script-click-event-bypass(19170) vdb-entry
oval:org.mitre.oval:def:100051 vdb-entry signature
http://www.mozilla.org/security/announce/mfsa2005-07.html