CVE-2004-0191: XSS
Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0191?
CVE-2004-0191 is considered a moderate severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2004-0191?
To fix CVE-2004-0191, update your Mozilla browser to version 1.4.2 or later.
What types of attacks are enabled by CVE-2004-0191?
CVE-2004-0191 enables cross-domain and cross-site scripting (XSS) attacks through JavaScript events.
Which versions of Mozilla are affected by CVE-2004-0191?
CVE-2004-0191 affects several versions of Mozilla before 1.4.2, including 0.9.5 up to 1.4.1.
What are the implications of exploiting CVE-2004-0191?
Exploiting CVE-2004-0191 can lead to unauthorized interactions with previous web pages, compromising user data and sessions.