Published: 20/10/2004 Updated: 11/10/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Firefox prior to 1.0 and Mozilla prior to 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote malicious users to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 0.10
mozilla firefox 0.9
mozilla mozilla
mozilla mozilla 1.5
mozilla mozilla 1.7.3
mozilla mozilla 1.7
mozilla firefox 0.9.1
mozilla mozilla 1.4.1
mozilla mozilla 1.4
mozilla mozilla 1.6
mozilla firefox 0.10.1
mozilla firefox 0.8
mozilla mozilla 1.3
mozilla firefox 0.9.2
mozilla firefox 0.9.3
mozilla mozilla 1.5.1
mozilla mozilla 1.7.1
mozilla mozilla 1.7.2

Synopsis mozilla security update Type/Severity Security Advisory: Critical Topic Updated mozilla packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla is an open source Web bro ...

Test Your Browser Open the link below in a new tab, then try to type data into form fields on the CitiBank website <a href="wwwcitibankcom/" onMouseOver="setInterval('documentmyformuserinputfocus();', 10);">Open this Link in New Tab</a> ...

NVD-CWE-Other http://secunia.com/advisories/12712 http://secunia.com/multiple_browsers_dialog_box_spoofing_test/http://secunia.com/multiple_browsers_form_field_focus_test/http://www.mozilla.org/security/announce/mfsa2005-05.html http://www.redhat.com/support/errata/RHSA-2005-323.html http://www.redhat.com/support/errata/RHSA-2005-335.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18864 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2005:323 https://www.exploit-db.com/exploits/589/

CVE-2004-1380

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect