CVE-2002-1126
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document...
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
Exploit likelihood
What each source reports
NVD Score used
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
CVE-2002-1126- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
CVE-2002-1126- Updated
- 2026-11-02
EUVDEUVD-2002-1114 No score
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
EUVD-2002-1114- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x37x-6gcq-9wg8 No score
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document...
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
- Record
GHSA-x37x-6gcq-9wg8- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1126 is a low vulnerability (CVSS 2.6) in Galeon Browser, published September 24, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=103176760004720&w=2
redhat.com/support/errata/RHSA-2003-046.html
iss.net/security_center/static/10084.php
securityfocus.com/bid/5694
mandrakesoft.com/security/advisories?name=MDKSA-2002:075
bugzilla.mozilla.org/show_bug.cgi?id=145579
nvd.nist.gov/vuln/detail/CVE-2002-1126
github.com/advisories/GHSA-x37x-6gcq-9wg8