CVE-2004-0191

Published: Mar 15, 2004Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.

Affected (32)

Products: Mozilla: Mozilla

1 product

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Mozilla Mozilla	Version 0.8
Mozilla Mozilla	Version 0.9.2.1
Mozilla Mozilla	Version 0.9.2
Mozilla Mozilla	Version 0.9.35
Mozilla Mozilla	Version 0.9.3
Mozilla Mozilla	Version 0.9.4.1
Mozilla Mozilla	Version 0.9.48
Mozilla Mozilla	Version 0.9.4
Mozilla Mozilla	Version 0.9.5
Mozilla Mozilla	Version 0.9.6
Mozilla Mozilla	Version 0.9.7
Mozilla Mozilla	Version 0.9.8
Mozilla Mozilla	Version 0.9.9
Mozilla Mozilla	Version 1.0.1
Mozilla Mozilla	Version 1.0.2
Mozilla Mozilla	Version 1.0
Mozilla Mozilla	Version 1.0 rc1
Mozilla Mozilla	Version 1.0 rc2
Mozilla Mozilla	Version 1.1
Mozilla Mozilla	Version 1.1 alpha
Mozilla Mozilla	Version 1.1 beta
Mozilla Mozilla	Version 1.2.1
Mozilla Mozilla	Version 1.2
Mozilla Mozilla	Version 1.2 alpha
Mozilla Mozilla	Version 1.2 beta
Mozilla Mozilla	Version 1.3.1
Mozilla Mozilla	Version 1.3
Mozilla Mozilla	Version 1.4.1
Mozilla Mozilla	Version 1.4
Mozilla Mozilla	Version 1.4 alpha
Mozilla Mozilla	Version 1.4 beta
Mozilla Mozilla	Version 1.5

References (20)

http://bugzilla.mozilla.org/show_bug.cgi?id=227417

Source: cve@mitre.org

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=107774710729469&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108448379429944&w=2

Source: cve@mitre.org

http://www.osvdb.org/4062

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-110.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-112.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/9747

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15322

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A874

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A937

Source: cve@mitre.org

http://bugzilla.mozilla.org/show_bug.cgi?id=227417

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=107774710729469&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=108448379429944&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/4062

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-110.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2004-112.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9747

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15322

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A874

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A937

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.