Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026
CVE-2002-2314
CVE-2002-2314
Description
Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0
Patches
Vulnerability mechanics
References
7- bugzilla.mozilla.org/show_bug.cginvdExploit
- seclists.org/bugtraq/2002/Jul/0260.htmlnvdExploit
- www.iss.net/security_center/static/9656.phpnvdExploitPatch
- cert.uni-stuttgart.de/archive/bugtraq/2002/09/msg00230.htmlnvd
- www.mandrakesoft.com/security/advisoriesnvd
- www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.htmlnvd
- www.securityfocus.com/bid/5293nvd
News mentions
0No linked articles in our index yet.