CVE-2002-2013

No fix known EPSS 2%

Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Published 2005-07-14 · CVE record · OSV

Products: mozilla, netscape communicator, netscape navigator