NetSight
IP …
medium6.8

CVE-2004-0191

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie d…

Impact

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.

Affected products

VendorProductAffected versions
MozillaMozilla
Versions 0.8, 0.9.2, 0.9.2.1, 0.9.3, 0.9.4, 0.9.4.1

References