Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Jun 16, 2026

CVE-2003-1492

Description

Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.

Affected products

Mozilla Corporation/Firefox
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Netscape/Navigator2 versions
cpe:2.3:a:netscape:navigator:7.0.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:netscape:navigator:7.0.2:*:*:*:*:*:*:*
- (no CPE)range: = 7.0.2
Mozilla Corporation/Mozillallm-fuzzy
osv-coords2 versions
pkg:apk/chainguard/firefox pkg:apk/wolfi/firefox
< 0+ 1 more
- (no CPE)range: < 0
- (no CPE)range: < 0

Patches

Vulnerability mechanics

References

www.securityfocus.com/archive/1/319919nvdExploit
www.securityfocus.com/bid/7456nvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/11924nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000