Mozilla

Mozilla

Mozilla Foundation Security Advisory 2009-62

Download filename spoofing with RTL override

Announced
October 27, 2009
Reporter
Jesse Ruderman, Sid Stamm
Impact
Low
Products
Firefox, SeaMonkey
Fixed in
  • Firefox 3.0.15
  • Firefox 3.5.4
  • SeaMonkey 2

Description

Mozilla security researchers Jesse Ruderman and Sid Stamm reported that when downloading a file containing a right-to-left override character (RTL) in the filename, the name displayed in the dialog title bar conflicts with the name of the file shown in the dialog body. An attacker could use this vulnerability to obfuscate the name and file extension of a file to be downloaded and opened, potentially causing a user to run an executable file when they expected to open a non-executable file.

References