CVE-2002-2314: Input Validation
Published Dec 31, 2002
·Updated
Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.
Affected Software
1 affected component
Mozilla Mozilla=1.0
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 26, 2007
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2314?
The severity of CVE-2002-2314 is considered to be moderate as it allows remote attackers to steal cookies.
2
How do I fix CVE-2002-2314?
To fix CVE-2002-2314, upgrade to a later version of Mozilla that is not vulnerable to this issue.
3
What type of attack does CVE-2002-2314 describe?
CVE-2002-2314 describes a cross-site scripting vulnerability that allows cookie theft.
4
Which version of Mozilla is affected by CVE-2002-2314?
CVE-2002-2314 specifically affects Mozilla version 1.0.
5
Can CVE-2002-2314 affect user privacy?
Yes, CVE-2002-2314 can significantly affect user privacy by allowing attackers to access sensitive cookie data.