CVE-2004-1381 Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers....
MediumCVSS 5.0
EPSS 6.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 0.8 | No fix listed |
| mozilla Firefox | = 0.9 | No fix listed |
| mozilla Firefox | = 0.9-rc | No fix listed |
| mozilla Firefox | = 0.9.1 | No fix listed |
| mozilla Firefox | = 0.9.2 | No fix listed |
| mozilla Firefox | = 0.9.3 | No fix listed |
| mozilla Firefox | = 0.10 | No fix listed |
| mozilla Firefox | = 0.10.1 | No fix listed |
| mozilla | All versions | No fix listed |
| mozilla | = 1.3 | No fix listed |
| mozilla | = 1.4 | No fix listed |
| mozilla | = 1.4-alpha | No fix listed |
| mozilla | = 1.4.1 | No fix listed |
| mozilla | = 1.5 | No fix listed |
| mozilla | = 1.5-alpha | No fix listed |
| mozilla | = 1.5-rc1 | No fix listed |
| mozilla | = 1.5-rc2 | No fix listed |
| mozilla | = 1.5.1 | No fix listed |
| mozilla | = 1.6 | No fix listed |
| mozilla | = 1.6-alpha | No fix listed |
| mozilla | = 1.6-beta | No fix listed |
| mozilla | = 1.7 | No fix listed |
| mozilla | = 1.7-alpha | No fix listed |
| mozilla | = 1.7-beta | No fix listed |
| mozilla | = 1.7-rc1 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla | = 1.7-rc2 | No fix listed |
| mozilla | = 1.7-rc3 | No fix listed |
| mozilla | = 1.7.1 | No fix listed |
| mozilla | = 1.7.2 | No fix listed |
| mozilla | = 1.7.3 | No fix listed |
References
- 12712 exploit patch third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- www.mozilla.org patch vendor-advisory
- web-browser-inactive-info-disclosure(17789) vdb-entry
- oval:org.mitre.oval:def:100053 signature vdb-entry