Unscored severity · published Sep 24, 2002
CVE-2002-1126
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GB
Galeon Browser · Galeon
1.2.4; 1.2.5; 1.2.6 · source: NVD
MO
Mozilla · Mozilla
0.9.3; 0.9.4; 0.9.5; 0.9.6; 0.9.7; 0.9.8; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1126
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1126
bugzilla.mozilla.org
http://bugzilla.mozilla.org/show_bug.cgi?id=145579
marc.info
http://marc.info/?l=bugtraq&m=103176760004720&w=2
Vendor Advisory
http://www.iss.net/security_center/static/10084.php
www.mandrakesoft.com
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075
Patch
http://www.redhat.com/support/errata/RHSA-2002-192.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2003-046.html
More from Galeon Browser
–
CVE-2007-3145
Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated…
–
CVE-2002-0594
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS)…