CVE-2005-0145

Published: 24 January 2005

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.

Status

References

• https://ubuntu.com/security/notices/USN-149-3
• https://www.cve.org/CVERecord?id=CVE-2005-0145
• NVD
• Launchpad
• Debian