CVE-2002-1126

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:galeon:galeon_browser:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:galeon:galeon_browser:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:galeon:galeon_browser:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:40

Type Values Removed Values Added
References () http://bugzilla.mozilla.org/show_bug.cgi?id=145579 - () http://bugzilla.mozilla.org/show_bug.cgi?id=145579 -
References () http://marc.info/?l=bugtraq&m=103176760004720&w=2 - () http://marc.info/?l=bugtraq&m=103176760004720&w=2 -
References () http://www.iss.net/security_center/static/10084.php - Vendor Advisory () http://www.iss.net/security_center/static/10084.php - Vendor Advisory
References () http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075 - () http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075 -
References () http://www.redhat.com/support/errata/RHSA-2002-192.html - Patch, Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2002-192.html - Patch, Vendor Advisory
References () http://www.redhat.com/support/errata/RHSA-2003-046.html - () http://www.redhat.com/support/errata/RHSA-2003-046.html -
References () http://www.securityfocus.com/bid/5694 - Exploit, Patch, Vendor Advisory () http://www.securityfocus.com/bid/5694 - Exploit, Patch, Vendor Advisory

Information

Published : 2002-09-24 04:00

Updated : 2024-11-20 23:40


NVD link : CVE-2002-1126

Mitre link : CVE-2002-1126

CVE.ORG link : CVE-2002-1126


JSON object : View

Products Affected

galeon

  • galeon_browser

mozilla

  • mozilla