CVE-2004-1451

Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.

CVSS v2.0 2.6 LOW

2.6^/10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://bugzilla.mozilla.org/show_bug.cgi?id=228176	Exploit Patch
http://secunia.com/advisories/10419/	Exploit
http://www.mozilla.org/projects/security/known-vulnerabilities.html
http://bugzilla.mozilla.org/show_bug.cgi?id=228176	Exploit Patch
http://secunia.com/advisories/10419/	Exploit
http://www.mozilla.org/projects/security/known-vulnerabilities.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:mozilla:0.8:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.2:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.2.1:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.3:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.4:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.4.1:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.5:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.6:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.7:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.8:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.9:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.35:::::::*
	cpe:2.3:a:mozilla:mozilla:0.9.48:::::::*
	cpe:2.3:a:mozilla:mozilla:1.0:::::::*
	cpe:2.3:a:mozilla:mozilla:1.0:rc1::::::
	cpe:2.3:a:mozilla:mozilla:1.0:rc2::::::
	cpe:2.3:a:mozilla:mozilla:1.0.1:::::::*
	cpe:2.3:a:mozilla:mozilla:1.0.2:::::::*
	cpe:2.3:a:mozilla:mozilla:1.1:::::::*
	cpe:2.3:a:mozilla:mozilla:1.1:alpha::::::
	cpe:2.3:a:mozilla:mozilla:1.1:beta::::::
	cpe:2.3:a:mozilla:mozilla:1.2:::::::*
	cpe:2.3:a:mozilla:mozilla:1.2:alpha::::::
	cpe:2.3:a:mozilla:mozilla:1.2:beta::::::
	cpe:2.3:a:mozilla:mozilla:1.2.1:::::::*
	cpe:2.3:a:mozilla:mozilla:1.3:::::::*
	cpe:2.3:a:mozilla:mozilla:1.3.1:::::::*
	cpe:2.3:a:mozilla:mozilla:1.4:::::::*
	cpe:2.3:a:mozilla:mozilla:1.4:alpha::::::
	cpe:2.3:a:mozilla:mozilla:1.4:beta::::::
	cpe:2.3:a:mozilla:mozilla:1.4.1:::::::*
	cpe:2.3:a:mozilla:mozilla:1.4.2:::::::*
	cpe:2.3:a:mozilla:mozilla:1.4.4:::::::*
	cpe:2.3:a:mozilla:mozilla:1.5:::::::*
	cpe:2.3:a:mozilla:mozilla:1.5.1:::::::*

History

20 Nov 2024, 23:50

Type	Values Removed	Values Added
References	~~() http://bugzilla.mozilla.org/show_bug.cgi?id=228176 - Exploit, Patch~~	() http://bugzilla.mozilla.org/show_bug.cgi?id=228176 - Exploit, Patch
References	~~() http://secunia.com/advisories/10419/ - Exploit~~	() http://secunia.com/advisories/10419/ - Exploit
References	~~() http://www.mozilla.org/projects/security/known-vulnerabilities.html -~~	() http://www.mozilla.org/projects/security/known-vulnerabilities.html -

Information

Published : 2004-12-31 05:00

Updated : 2024-11-20 23:50

NVD link : CVE-2004-1451

Mitre link : CVE-2004-1451

CVE.ORG link : CVE-2004-1451

JSON object : View

Products Affected

mozilla

mozilla

CWE

NVD-CWE-Other

2.6 /10