CVE-2002-1204

CVE-2002-1204 describes a vulnerability in Netscape Communicator 4.x that allows an attacker to steal user preferences, including sensitive data like URL history and email addresses. This is achieved by redefining the user_pref() function and accessing the predictable prefs.js file. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, leading to partial confidentiality impact. While there is no known active exploitation or publicly available exploit code, the CVE has garnered significant community discussion, with 10 mentions across various platforms.