CVE ID:	CVE-2004-0191
Description:	Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
Test IDs:	1.3.6.1.4.1.25623.1.0.51128
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0191 BugTraq ID: 9747 http://www.securityfocus.com/bid/9747 Bugtraq: 20040225 Sandblad #13: Cross-domain exploit on zombie document with event handlers (Google Search) http://marc.info/?l=bugtraq&m=107774710729469&w=2 HPdes Security Advisory: SSRT4722 http://marc.info/?l=bugtraq&m=108448379429944&w=2 http://www.osvdb.org/4062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A874 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A937 RedHat Security Advisories: RHSA-2004:110 http://www.redhat.com/support/errata/RHSA-2004-110.html RedHat Security Advisories: RHSA-2004:112 http://www.redhat.com/support/errata/RHSA-2004-112.html XForce ISS Database: mozilla-event-handler-xss(15322) https://exchange.xforce.ibmcloud.com/vulnerabilities/15322