CVE-2003-1492: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.

Affected products

• Mozilla Firefox: any version
• Netscape Navigator: version 7.0.2 only

Published 2003-12-31. Last modified 2026-06-16.