CVE-2004-0763
Mozilla Firefox 0.9.1 and 0.9.2 - Certificate Spoofing via Redirect and onunload JavaScript
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0763. PoCs published by E.Kellinis.
AI-analyzed exploit summary This exploit demonstrates a spoofing vulnerability in Mozilla and Firefox, allowing an attacker to spoof the URI and SSL certificate of a trusted site. It uses a combination of HTML meta refresh and JavaScript to manipulate the displayed content and reload the page, creating a phishing opportunity.
Description
Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.
Exploits (2)
This exploit demonstrates a spoofing vulnerability in Mozilla and Firefox, allowing an attacker to spoof the URI and SSL certificate of a trusted site. It uses a combination of HTML meta refresh and JavaScript to manipulate the displayed content and reload the page, creating a phishing opportunity.
This is a writeup describing a certificate spoofing vulnerability in Microsoft Internet Explorer 6. The provided HTML code demonstrates a meta-refresh technique to redirect users to a foreign domain, potentially misleading them into trusting a spoofed certificate.