Executive Summary

Informations
Name CVE-2004-0191 First vendor Publication 2004-03-15
Vendor Cve Last vendor Modification 2017-10-10

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0191

CAPEC : Common Attack Pattern Enumeration & Classification

Id Name
CAPEC-26 Leveraging Race Conditions
CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions

CWE : Common Weakness Enumeration

% Id Name

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10838
 
Oval ID: oval:org.mitre.oval:def:10838
Title: Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Description: Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Family: unix Class: vulnerability
Reference(s): CVE-2004-0191
Version: 5
Platform(s): Red Hat Enterprise Linux 3
CentOS Linux 3
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:874
 
Oval ID: oval:org.mitre.oval:def:874
Title: Red Hat Mozilla Zombie Document Vulnerability
Description: Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Family: unix Class: vulnerability
Reference(s): CVE-2004-0191
Version: 2
Platform(s): Red Hat Linux 9
Product(s): mozilla
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:937
 
Oval ID: oval:org.mitre.oval:def:937
Title: Red Hat Enterprise 3 Mozilla Zombie Document Vulnerability
Description: Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Family: unix Class: vulnerability
Reference(s): CVE-2004-0191
Version: 2
Platform(s): Red Hat Enterprise Linux 3
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 32

Open Source Vulnerability Database (OSVDB)

Id Description
4062 Mozilla Zombie Document XSS

Mozilla contains a flaw that allows a remote cross site scripting attack. This flaw exists because of a design error that allows event handlers in a web document from one domain to be executed in the context of another. . This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

Nessus® Vulnerability Scanner

Date Description
2004-07-06 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2004-110.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/9747
BUGTRAQ http://marc.info/?l=bugtraq&m=107774710729469&w=2
CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=227417
HP http://marc.info/?l=bugtraq&m=108448379429944&w=2
OSVDB http://www.osvdb.org/4062
OVAL https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT http://www.redhat.com/support/errata/RHSA-2004-110.html
http://www.redhat.com/support/errata/RHSA-2004-112.html
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/15322

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
Date Informations
2020-05-23 00:15:44
  • Multiple Updates
2017-10-10 09:23:26
  • Multiple Updates
2016-10-18 12:01:18
  • Multiple Updates
2016-06-28 15:05:14
  • Multiple Updates
2016-04-26 12:47:39
  • Multiple Updates
2014-02-17 10:27:16
  • Multiple Updates
2013-05-11 11:40:15
  • Multiple Updates