← Database

CVE-2004-2225

MEDIUM CVSS: 5.0 Published: 2004-12-31 Modified: 2026-06-16

Description

Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.

Affected Platforms

Mozilla Firefox

Weakness Type

NVD-CWE-Other

References