CVE-2002-1126 describes a privacy vulnerability in Mozilla 1.1 and earlier, as well as Mozilla-based browsers like Netscape and Galeon. This flaw allows malicious web pages to prematurely access the document referrer, enabling them to determine the next URL a user visits, even if manually entered, via the onunload handler. With a CVSS score of 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N), it is a low-severity issue, requiring high attack complexity to achieve a partial confidentiality impact. There is no evidence of active exploitation, no public exploit code available, and minimal community discussion or media coverage surrounding this older vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2.4CPE matchmatch criteria | cpe:2.3:a:galeon:galeon_browser:1.2.4:*:*:*:*:*:*:* | ||
1.2.5CPE matchmatch criteria | cpe:2.3:a:galeon:galeon_browser:1.2.5:*:*:*:*:*:*:* | ||
1.2.6CPE matchmatch criteria | cpe:2.3:a:galeon:galeon_browser:1.2.6:*:*:*:*:*:*:* | ||
0.9.3CPE matchmatch criteria | cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:* | ||
0.9.4CPE matchmatch criteria | cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:H/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.