Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade firefoxUpgrade linux-mozillaUpgrade mozillaUpgrade mozilla-thunderbirdUpgrade linux-mozilla-devel | Dec 10, 2025 | Apr 16, 2006 |
| Gentoo Linux | — | Upgrade www-client/mozilla-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade www-client/mozilla-firefox.Upgrade www-client/mozilla. | Oct 30, 2017 | Apr 14, 2006 |
| Mfsa2006 13 | — | Upgrade to Mozilla Firefox version 1.5Upgrade to Mozilla Firefox version 1.0.8 | Nov 21, 2013 | Apr 14, 2006 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.0.0 | Nov 21, 2013 | Apr 14, 2006 |
| Suse | — | Upgrade mozilla-koUpgrade mozilla-calendarUpgrade mozilla-huUpgrade mozillaUpgrade mozilla-deatUpgrade mozilla-csUpgrade mozilla-dom-inspectorUpgrade mozilla-venkmanUpgrade mozilla-develUpgrade mozilla-mailUpgrade mozilla-ircUpgrade mozilla-ja | Feb 17, 2015 | Apr 14, 2006 |
| Ubuntu | — | Upgrade mozilla-psmUpgrade mozilla-firefox | Nov 8, 2024 | Apr 14, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub