Description
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
Affected products
- galeon / galeon_browser1.2.4 – 1.2.4
- galeon / galeon_browser1.2.5 – 1.2.5
- galeon / galeon_browser1.2.6 – 1.2.6
- Mozilla / mozilla0.9.3 – 0.9.3
- Mozilla / mozilla0.9.4 – 0.9.4
- Mozilla / mozilla0.9.5 – 0.9.5
- Mozilla / mozilla0.9.6 – 0.9.6
- Mozilla / mozilla0.9.7 – 0.9.7
- Mozilla / mozilla0.9.8 – 0.9.8
- Mozilla / mozilla0.9.9 – 0.9.9
- Mozilla / mozilla1.0.1 – 1.0.1
- Mozilla / mozilla1.1 – 1.1
References
- MAILING_LISThttp://marc.info/?l=bugtraq&m=103176760004720&w=2
- MISChttp://www.redhat.com/support/errata/RHSA-2003-046.html
- MISChttp://www.iss.net/security_center/static/10084.php
- MISChttp://www.securityfocus.com/bid/5694
- VENDOR_ADVISORYhttp://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075
- MISChttp://bugzilla.mozilla.org/show_bug.cgi?id=145579
- MISChttp://www.redhat.com/support/errata/RHSA-2002-192.html
Updated 4m ago · 8 sources