Mozilla: Privacy leak and other vulnerabilities [LWN.net]

Package(s):

mozilla

CVE #(s):

CAN-2002-1126 CAN-2002-1091

Created:

November 1, 2002

Updated:

February 13, 2003

Description:

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs.

Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.

All users are encouraged to upgrade to this latest stable 1.0.x release of Mozilla.

Alerts:

Conectiva	CLA-2003:568	2003-02-13
Mandrake	MDKSA-2002:075	2002-10-31

(Log in to post comments)