CVE-2005-0145: Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which a...

Security readout for executives and security teams

This is an old Firefox issue where a web page could confuse the browser about whether a click came from the user or from script. In Firefox before 1.0, that could bypass the file download prompt when the user used Alt-click. Current business risk is mainly from unmanaged legacy browsers. Exposure is likely limited to environments still running Firefox before 1.0 or preserved legacy images. Modern managed browser fleets should not be affected, but inventories should confirm there are no unsupported Mozilla-era browser installs. Treat this as a legacy hygiene issue, not an emergency, unless pre-1.0 Firefox exists in the environment. The priority is confirming unsupported browsers are absent or isolated. Mitigation focus: Remove Firefox versions earlier than 1.0 from managed systems.; Replace unsupported legacy browsers with supported vendor-maintained browsers.; Check Mozilla MFSA2005-07 and vendor guidance for historical fix context..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.