VDB
CVE-2004-0191
CVE-2004-0191
PUBLISHED
Reported by mitre · Published September 1, 2004
Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | *, n/a, * |
Timeline
- Mar 15, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 31, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
References
- RHSA-2004:110 vendor-advisoryx_refsource_REDHAT
- RHSA-2004:112 vendor-advisoryx_refsource_REDHAT
- SSRT4722 vendor-advisoryx_refsource_HP
- 4062 vdb-entryx_refsource_OSVDB
- mozilla-event-handler-xss(15322) vdb-entryx_refsource_XF
- 9747 vdb-entryx_refsource_BID
- 20040225 Sandblad #13: Cross-domain exploit on zombie document with event handlers mailing-listx_refsource_BUGTRAQ
- oval:org.mitre.oval:def:937 vdb-entrysignaturex_refsource_OVAL
- oval:org.mitre.oval:def:874 vdb-entrysignaturex_refsource_OVAL
- x_refsource_CONFIRM