CVE-2002-2359: XSS
Published Dec 31, 2002
·Updated
Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.
Affected Software
4 affected components
Mozilla Mozilla=1.0
Mozilla Mozilla=1.0-rc1
Mozilla Mozilla=1.0-rc2
Mozilla Mozilla=1.1-alpha
Remediation
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 29, 2007
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2359?
CVE-2002-2359 is considered a moderate severity vulnerability due to its ability to allow cross-site scripting attacks.
2
How do I fix CVE-2002-2359?
To fix CVE-2002-2359, upgrade to a version of Mozilla that is not vulnerable, such as Mozilla 1.1 or later.
3
What are the affected versions in CVE-2002-2359?
CVE-2002-2359 affects Mozilla versions 1.0, 1.0-rc1, 1.0-rc2, and 1.1-alpha.
4
What type of vulnerability is CVE-2002-2359?
CVE-2002-2359 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2002-2359 be exploited remotely?
Yes, CVE-2002-2359 can be exploited remotely by injecting arbitrary web script or HTML via the title tag of an ftp URL.