Vulnerabilities > Mozilla > Mozilla > Medium

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-2013 Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
network
low complexity
mozilla netscape
5.0
2002-06-25 CVE-2002-0354 The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.
network
low complexity
mozilla netscape
5.0
2002-06-18 CVE-2002-0594 Local File Detection vulnerability in Netscape/Mozilla/Galeon
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
network
low complexity
galeon mozilla netscape
5.0
2001-12-31 CVE-2001-1490 Denial of Service vulnerability in Mozilla 0.9.6
Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.
network
low complexity
mozilla
5.0
2000-07-25 CVE-2000-0655 Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1.
network
low complexity
mozilla netscape
5.0