CVE-2004-1380 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 3.7% (pctl 89)
Patch early
A public exploit exists.
Description
Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
| EPSS | 3.68% — more likely to be exploited than 89% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-10-20 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| mozilla | firefox |
| mozilla | mozilla |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Multiple Browsers - Tabbed Browsing | 2004-10-22 |
References
- http://secunia.com/advisories/12712
- http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
- http://secunia.com/multiple_browsers_form_field_focus_test/
- http://www.mozilla.org/security/announce/mfsa2005-05.html
- http://www.redhat.com/support/errata/RHSA-2005-323.html
- http://www.redhat.com/support/errata/RHSA-2005-335.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18864
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211
- http://secunia.com/advisories/12712
- http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
- http://secunia.com/multiple_browsers_form_field_focus_test/
- http://www.mozilla.org/security/announce/mfsa2005-05.html
- http://www.redhat.com/support/errata/RHSA-2005-323.html
- http://www.redhat.com/support/errata/RHSA-2005-335.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18864
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211
→ the Explorer · watch your stack · NVD