CVE-2004-0191: Undefined Security Weakness

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page zombie document and enable cross-domain and cross-site scripting XSS attacks, as demonstrated using onmousemove events...

Sandblad #13: Cross-domain exploit on zombie document with event handlers

PUBLIC SECURITY ADVISORY: Sandblad 13 -------------------------------------------------------------- Title: Cross-domain exploit on zombie document with event handlers Date: 2004-02-25 Software: Mozilla web browser Vendor: http://www.mozilla.org/ Status: Patched Reference:...