NVD

Id
70647  
Name
CVE-2004-0191  
Description
Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2004-03-15  
Modified Date
2016-10-17  
Seq
2004-0191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364401 70647 CVE-2004-0191 http://bugzilla.mozilla.org/show_bug.cgi?id=227417  View
364402 70647 CVE-2004-0191 20040225 Sandblad #13: Cross-domain exploit on zombie document with event handlers  View
364403 70647 CVE-2004-0191 SSRT4722  View
364404 70647 CVE-2004-0191 oval:org.mitre.oval:def:874  View
364405 70647 CVE-2004-0191 oval:org.mitre.oval:def:937  View
364406 70647 CVE-2004-0191 RHSA-2004:110  View
364407 70647 CVE-2004-0191 RHSA-2004:112  View
364408 70647 CVE-2004-0191 9747  View
364409 70647 CVE-2004-0191 mozilla-event-handler-xss(15322)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62716 JVNDB-2004-000057 Mozilla の GetOwnerDocument() 関数におけるクロスサイトスクリプティングの脆弱性 Mozilla の GetOwnerDocument() 関数には、リンクをたどる際に、移動先の Web ページの内容をブラウザの表示よりも早く取得してしまう脆弱性が存在します。 CVE-2004-0191 8618 CVE-2004-0191 70647 6.8 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000057.html 2004-02-25 2007-04-01 View