CVE

Id
8619  
CVE No.
CVE-2004-0191  
Status
Entry  
Description
Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
53889 8619 CVE-2004-0191 BUGTRAQ:20040225 Sandblad #13: Cross-domain exploit on zombie document with event handlers  View
53890 8619 CVE-2004-0191 URL:http://marc.info/?l=bugtraq&m=107774710729469&w=2  View
53891 8619 CVE-2004-0191 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=227417  View
53892 8619 CVE-2004-0191 REDHAT:RHSA-2004:110  View
53893 8619 CVE-2004-0191 URL:http://www.redhat.com/support/errata/RHSA-2004-110.html  View
53894 8619 CVE-2004-0191 REDHAT:RHSA-2004:112  View
53895 8619 CVE-2004-0191 URL:http://www.redhat.com/support/errata/RHSA-2004-112.html  View
53896 8619 CVE-2004-0191 HP:SSRT4722  View
53897 8619 CVE-2004-0191 URL:http://marc.info/?l=bugtraq&m=108448379429944&w=2  View
53898 8619 CVE-2004-0191 XF:mozilla-event-handler-xss(15322)  View
53899 8619 CVE-2004-0191 URL:http://xforce.iss.net/xforce/xfdb/15322  View
53900 8619 CVE-2004-0191 BID:9747  View
53901 8619 CVE-2004-0191 URL:http://www.securityfocus.com/bid/9747  View
53902 8619 CVE-2004-0191 OSVDB:4062  View
53903 8619 CVE-2004-0191 URL:http://www.osvdb.org/4062  View
53904 8619 CVE-2004-0191 OVAL:oval:org.mitre.oval:def:874  View
53905 8619 CVE-2004-0191 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:874  View
53906 8619 CVE-2004-0191 OVAL:oval:org.mitre.oval:def:937  View

Related JVN