Description
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
References (7)
Core 7
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=103176760004720&w=2
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2003-046.html
Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10084.php
Exploit, Patch, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5694
Various Sources vendor-advisory
x_refsource_mandrake
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075
Issue Tracking x_refsource_confirm
http://bugzilla.mozilla.org/show_bug.cgi?id=145579
Patch, Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-192.html
Scores
EPSS
0.0152
EPSS Percentile
71.9%
Details
Status
published
Products (12)
galeon/galeon_browser
1.2.4
galeon/galeon_browser
1.2.5
galeon/galeon_browser
1.2.6
mozilla/mozilla
0.9.3
mozilla/mozilla
0.9.4
mozilla/mozilla
0.9.5
mozilla/mozilla
0.9.6
mozilla/mozilla
0.9.7
mozilla/mozilla
0.9.8
mozilla/mozilla
0.9.9
... and 2 more
Published
Sep 24, 2002
Tracked Since
Feb 18, 2026