CVE-2002-1126
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document...
CVE-2002-1126 is a low vulnerability (CVSS 2.6) in Galeon Browser, published September 24, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. No source names a fixed version.
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
Exploit likelihood
What each source reports
NVD Score used
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
CVE-2002-1126- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
CVE-2002-1126- Updated
- 2026-11-02
EUVDEUVD-2002-1114 No score
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
EUVD-2002-1114- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x37x-6gcq-9wg8 No score
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document...
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
GHSA-x37x-6gcq-9wg8- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
marc.info?l=bugtraq&m=103176760004720&w=2
redhat.com/support/errata/RHSA-2003-046.html
iss.net/security_center/static/10084.php
securityfocus.com/bid/5694
mandrakesoft.com/security/advisories?name=MDKSA-2002:075
bugzilla.mozilla.org/show_bug.cgi?id=145579
nvd.nist.gov/vuln/detail/CVE-2002-1126
github.com/advisories/GHSA-x37x-6gcq-9wg8