CVE-2004-1451

Published Feb 13, 2005 CVSS 2.0 · 2.6 Low EPSS 1.4% KEV · Not listed
Description
Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2004-1447 Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 12:53 AM
Reserved
Feb 13, 2005, 12:00 AM
Status
Modified
Published
Dec 31, 2004, 5:00 AM
Modified
Jun 16, 2026, 10:07 PM