Vulnerability Details CVE-2004-1451
Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.4%
CVSS Severity
CVSS v2 Score 2.6
References
- http://bugzilla.mozilla.org/show_bug.cgi?id=228176
- http://secunia.com/advisories/10419/
- http://www.mozilla.org/projects/security/known-vulnerabilities.html
- http://bugzilla.mozilla.org/show_bug.cgi?id=228176
- http://secunia.com/advisories/10419/
- http://www.mozilla.org/projects/security/known-vulnerabilities.html
Products affected by CVE-2004-1451
-
cpe:2.3:a:mozilla:mozilla:0.8
-
cpe:2.3:a:mozilla:mozilla:0.9.2
-
cpe:2.3:a:mozilla:mozilla:0.9.2.1
-
cpe:2.3:a:mozilla:mozilla:0.9.3
-
cpe:2.3:a:mozilla:mozilla:0.9.35
-
cpe:2.3:a:mozilla:mozilla:0.9.4
-
cpe:2.3:a:mozilla:mozilla:0.9.4.1
-
cpe:2.3:a:mozilla:mozilla:0.9.48
-
cpe:2.3:a:mozilla:mozilla:0.9.5
-
cpe:2.3:a:mozilla:mozilla:0.9.6
-
cpe:2.3:a:mozilla:mozilla:0.9.7
-
cpe:2.3:a:mozilla:mozilla:0.9.8
-
cpe:2.3:a:mozilla:mozilla:0.9.9
-
cpe:2.3:a:mozilla:mozilla:1.0
-
cpe:2.3:a:mozilla:mozilla:1.0.1
-
cpe:2.3:a:mozilla:mozilla:1.0.2
-
cpe:2.3:a:mozilla:mozilla:1.1
-
cpe:2.3:a:mozilla:mozilla:1.2
-
cpe:2.3:a:mozilla:mozilla:1.2.1
-
cpe:2.3:a:mozilla:mozilla:1.3
-
cpe:2.3:a:mozilla:mozilla:1.3.1
-
cpe:2.3:a:mozilla:mozilla:1.4
-
cpe:2.3:a:mozilla:mozilla:1.4.1
-
cpe:2.3:a:mozilla:mozilla:1.4.2
-
cpe:2.3:a:mozilla:mozilla:1.4.4
-
cpe:2.3:a:mozilla:mozilla:1.5
-
cpe:2.3:a:mozilla:mozilla:1.5.1