CVE-2002-1126: Galeon Browser

Low severity, CVSS 2.6. EPSS: 1.5% chance of exploitation in the next 30 days.

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.

Affected products

• Galeon Galeon Browser: version 1.2.4 only; version 1.2.5 only; version 1.2.6 only
• Mozilla Mozilla: version 0.9.3 only; version 0.9.4 only; version 0.9.5 only; version 0.9.6 only; version 0.9.7 only; version 0.9.8 only; …

Published 2002-09-24. Last modified 2026-06-16.