CVE-2004-0191: Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allo...

Security readout for executives and security teams

This is an old Mozilla browser flaw where page-loading behavior could let script from one site interact with a prior page. In business terms, an affected legacy browser could expose web-session data or enable cross-site scripting if a user visits malicious content. The bundle provides no CVSS score and no KEV evidence of active exploitation. Exposure is most likely limited to legacy systems running Mozilla browser versions before 1.4.2 or vendor-packaged derivatives covered by historical advisories. Modern browser exposure is not supported by the provided sources. Low operational urgency for modern environments, but moderate concern for regulated or legacy estates. Prioritize confirming whether obsolete Mozilla browsers still exist, then remove or update them through normal endpoint hygiene. Mitigation focus: Upgrade Mozilla before 1.4.2 to a fixed vendor-supported version.; Apply relevant vendor errata for managed Linux distributions.; Remove obsolete Mozilla packages from endpoints and gold images..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.