CVE-2004-1380

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

3.68% chance of exploitation in the next 30 days, 90th percentile

Published

2005-01-29

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/589

Security advisories

• http://secunia.com/advisories/12712
• http://secunia.com/multiple_browsers_dialog_box_spoofing_test
• http://secunia.com/multiple_browsers_form_field_focus_test
• http://www.mozilla.org/security/announce/mfsa2005-05.html
• http://www.redhat.com/support/errata/RHSA-2005-323.html
• http://www.redhat.com/support/errata/RHSA-2005-335.html

References

• CVE Record
• NVD entry