--- title: "CVE-2005-0230\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2005-0230?format=md keywords: index, follow --- # CVE-2005-0230 Publication date 2 May 2005 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka "firedragging." ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | mozilla | 7.04 feisty | Not in release | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Not affected | | mozilla-thunderbird | 7.04 feisty | Not affected | | 6.10 edgy | Not affected | | 6.06 LTS dapper | Not affected | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0230) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2005-0230) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2005-0230) * [Debian](https://security-tracker.debian.org/tracker/CVE-2005-0230) ### Related Ubuntu Security Notices (USN) + [USN-149-3](https://usn.ubuntu.com/USN-149-3) + Ubuntu 4.10 update for Firefox vulnerabilities + 28 July 2005 ### Other references *