CVE-2005-0587

Medium

Description

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK (link) file twice, which overwrites the file that was referenced in the first .LNK file.

SeverityMedium
CVSS6.5
Exploit probability—
ProductMozilla Firefox
PublishedMar 25, 2005
First seenMar 25, 2005

How to fix

Update
  • mozilla firefox1.0.1 or later
  • mozilla mozilla1.7.6 or later

Affected products

ProductAffected versionsFixed in
mozilla firefoxv < 1.0.11.0.1
mozilla mozillav < 1.7.61.7.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.