CVE-2004-1380 Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and fac...
MediumCVSS 5.0
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 0.8 | No fix listed |
| mozilla Firefox | = 0.9 | No fix listed |
| mozilla Firefox | = 0.9-rc | No fix listed |
| mozilla Firefox | = 0.9.1 | No fix listed |
| mozilla Firefox | = 0.9.2 | No fix listed |
| mozilla Firefox | = 0.9.3 | No fix listed |
| mozilla Firefox | = 0.10 | No fix listed |
| mozilla Firefox | = 0.10.1 | No fix listed |
| mozilla | All versions | No fix listed |
| mozilla | = 1.3 | No fix listed |
| mozilla | = 1.4 | No fix listed |
| mozilla | = 1.4-alpha | No fix listed |
| mozilla | = 1.4.1 | No fix listed |
| mozilla | = 1.5 | No fix listed |
| mozilla | = 1.5-alpha | No fix listed |
| mozilla | = 1.5-rc1 | No fix listed |
| mozilla | = 1.5-rc2 | No fix listed |
| mozilla | = 1.5.1 | No fix listed |
| mozilla | = 1.6 | No fix listed |
| mozilla | = 1.6-alpha | No fix listed |
| mozilla | = 1.6-beta | No fix listed |
| mozilla | = 1.7 | No fix listed |
| mozilla | = 1.7-alpha | No fix listed |
| mozilla | = 1.7-beta | No fix listed |
| mozilla | = 1.7-rc1 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.7-rc2 | No fix listed |
| mozilla | = 1.7-rc3 | No fix listed |
| mozilla | = 1.7.1 | No fix listed |
| mozilla | = 1.7.2 | No fix listed |
| mozilla | = 1.7.3 | No fix listed |
References
- 12712 patch third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- www.mozilla.org patch vendor-advisory
- RHSA-2005:323 patch vendor-advisory
- RHSA-2005:335 patch vendor-advisory
- web-browser-modal-spoofing(18864) vdb-entry
- oval:org.mitre.oval:def:100050 signature vdb-entry
- oval:org.mitre.oval:def:10211 signature vdb-entry