1. CVE-Search
  2. CVE-2004-0191
ID CVE-2004-0191
Summary Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
References
Vulnerable Configurations
  • cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 10-10-2017 - 01:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
oval via4
  • accepted 2007-04-25T19:53:05.638-04:00
    class vulnerability
    contributors
    • name Jay Beale
      organization Bastille Linux
    • name Thomas R. Jones
      organization Maitreya Security
    description Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
    family unix
    id oval:org.mitre.oval:def:874
    status accepted
    submitted 2004-03-18T12:00:00.000-04:00
    title Red Hat Mozilla Zombie Document Vulnerability
    version 38
  • accepted 2007-04-25T19:53:09.540-04:00
    class vulnerability
    contributors
    • name Jay Beale
      organization Bastille Linux
    • name Jay Beale
      organization Bastille Linux
    • name Thomas R. Jones
      organization Maitreya Security
    description Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
    family unix
    id oval:org.mitre.oval:def:937
    status accepted
    submitted 2004-04-08T12:00:00.000-04:00
    title Red Hat Enterprise 3 Mozilla Zombie Document Vulnerability
    version 38
redhat via4
advisories
  • rhsa
    id RHSA-2004:110
  • rhsa
    id RHSA-2004:112
refmap via4
bid 9747
bugtraq 20040225 Sandblad #13: Cross-domain exploit on zombie document with event handlers
confirm http://bugzilla.mozilla.org/show_bug.cgi?id=227417
hp SSRT4722
osvdb 4062
xf mozilla-event-handler-xss(15322)
Last major update 10-10-2017 - 01:30
Published 15-03-2004 - 05:00
Last modified 10-10-2017 - 01:30
Back to Top