Vulnerability in Mozilla

CVE-2004-1451

Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

  • Mozilla — versions 0.8, 0.9.2, 0.9.2.1
  • N/a — versions n/a

References