CVE-2004-1451: Low severity Mozilla Mozilla vulnerability
Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1451?
CVE-2004-1451 has a moderate severity rating due to its potential to facilitate phishing attacks by misleading users.
How do I fix CVE-2004-1451?
The best way to fix CVE-2004-1451 is to upgrade to Mozilla version 1.6 or later, which addresses this vulnerability.
Which versions of Mozilla are affected by CVE-2004-1451?
CVE-2004-1451 affects multiple versions of Mozilla, including 1.0 through 1.5 and several earlier versions.
What impact does CVE-2004-1451 have on users?
CVE-2004-1451 can allow remote attackers to perform phishing attacks by obscuring the actual URL in the browser's status bar.
Can I still use older versions of Mozilla with CVE-2004-1451?
While you can still use older versions of Mozilla, doing so poses a security risk due to the potential for phishing attacks associated with CVE-2004-1451.