CVE-2004-1451

Published: Dec 31, 2004Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.

Affected (35)

Products: Mozilla: Mozilla

Mozilla

1 product

Mozilla

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Mozilla Mozilla	Version 0.8
Mozilla Mozilla	Version 0.9.2.1
Mozilla Mozilla	Version 0.9.2
Mozilla Mozilla	Version 0.9.35
Mozilla Mozilla	Version 0.9.3
Mozilla Mozilla	Version 0.9.4.1
Mozilla Mozilla	Version 0.9.48
Mozilla Mozilla	Version 0.9.4
Mozilla Mozilla	Version 0.9.5
Mozilla Mozilla	Version 0.9.6
Mozilla Mozilla	Version 0.9.7
Mozilla Mozilla	Version 0.9.8
Mozilla Mozilla	Version 0.9.9
Mozilla Mozilla	Version 1.0.1
Mozilla Mozilla	Version 1.0.2
Mozilla Mozilla	Version 1.0
Mozilla Mozilla	Version 1.0 rc1
Mozilla Mozilla	Version 1.0 rc2
Mozilla Mozilla	Version 1.1
Mozilla Mozilla	Version 1.1 alpha
Mozilla Mozilla	Version 1.1 beta
Mozilla Mozilla	Version 1.2.1
Mozilla Mozilla	Version 1.2
Mozilla Mozilla	Version 1.2 alpha
Mozilla Mozilla	Version 1.2 beta
Mozilla Mozilla	Version 1.3.1
Mozilla Mozilla	Version 1.3
Mozilla Mozilla	Version 1.4.1
Mozilla Mozilla	Version 1.4.2
Mozilla Mozilla	Version 1.4.4
Mozilla Mozilla	Version 1.4
Mozilla Mozilla	Version 1.4 alpha
Mozilla Mozilla	Version 1.4 beta
Mozilla Mozilla	Version 1.5.1
Mozilla Mozilla	Version 1.5