Description
The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containing whitespace, dots, or ASCII byte 160.
References
- 16431 vdb-entry
- http://secunia.com/secunia_research/2004-11/advisory/
- 12979 third-party-advisory