CVE-2004-1380
First published: Wed Oct 20 2004(Updated: )
Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | =0.8 | |
| Firefox | =0.9 | |
| Firefox | =0.9-rc | |
| Firefox | =0.9.1 | |
| Firefox | =0.9.2 | |
| Firefox | =0.9.3 | |
| Firefox | =0.10 | |
| Firefox | =0.10.1 | |
| Mozilla Firefox | ||
| Mozilla Firefox | =1.3 | |
| Mozilla Firefox | =1.4 | |
| Mozilla Firefox | =1.4-alpha | |
| Mozilla Firefox | =1.4.1 | |
| Mozilla Firefox | =1.5 | |
| Mozilla Firefox | =1.5-alpha | |
| Mozilla Firefox | =1.5-rc1 | |
| Mozilla Firefox | =1.5-rc2 | |
| Mozilla Firefox | =1.5.1 | |
| Mozilla Firefox | =1.6 | |
| Mozilla Firefox | =1.6-alpha | |
| Mozilla Firefox | =1.6-beta | |
| Mozilla Firefox | =1.7 | |
| Mozilla Firefox | =1.7-alpha | |
| Mozilla Firefox | =1.7-beta | |
| Mozilla Firefox | =1.7-rc1 | |
| Mozilla Firefox | =1.7-rc2 | |
| Mozilla Firefox | =1.7-rc3 | |
| Mozilla Firefox | =1.7.1 | |
| Mozilla Firefox | =1.7.2 | |
| Mozilla Firefox | =1.7.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/12712
- http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
- http://secunia.com/multiple_browsers_form_field_focus_test/
- http://www.mozilla.org/security/announce/mfsa2005-05.html
- http://www.redhat.com/support/errata/RHSA-2005-323.html
- http://www.redhat.com/support/errata/RHSA-2005-335.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18864
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050
Frequently Asked Questions
What is the severity of CVE-2004-1380?
CVE-2004-1380 is considered to have a moderate severity as it can facilitate phishing attacks through dialog box spoofing.
How do I fix CVE-2004-1380?
To fix CVE-2004-1380, you should upgrade to a version of Mozilla Firefox or Mozilla that is 1.0 or later and ensure your software is up to date.
What type of attack can CVE-2004-1380 enable?
CVE-2004-1380 can enable remote attackers to spoof dialog boxes, potentially leading to phishing attacks.
Which versions of software are affected by CVE-2004-1380?
CVE-2004-1380 affects Firefox versions before 1.0 and Mozilla versions before 1.7.5.
Is CVE-2004-1380 still relevant today?
While CVE-2004-1380 pertains to older versions of browsers, it highlights ongoing issues with dialog box handling that may still exist in some form in modern software.
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/mozilla
- canonical/firefox
- version/firefox/0.8
- version/firefox/0.9
- version/firefox/0.9-rc
- version/firefox/0.9.1
- version/firefox/0.9.2
- version/firefox/0.9.3
- version/firefox/0.10
- version/firefox/0.10.1
- canonical/mozilla firefox
- version/mozilla firefox/1.3
- version/mozilla firefox/1.4
- version/mozilla firefox/1.4-alpha
- version/mozilla firefox/1.4.1
- version/mozilla firefox/1.5
- version/mozilla firefox/1.5-alpha
- version/mozilla firefox/1.5-rc1
- version/mozilla firefox/1.5-rc2
- version/mozilla firefox/1.5.1
- version/mozilla firefox/1.6
- version/mozilla firefox/1.6-alpha
- version/mozilla firefox/1.6-beta
- version/mozilla firefox/1.7
- version/mozilla firefox/1.7-alpha
- version/mozilla firefox/1.7-beta
- version/mozilla firefox/1.7-rc1
- version/mozilla firefox/1.7-rc2
- version/mozilla firefox/1.7-rc3
- version/mozilla firefox/1.7.1
- version/mozilla firefox/1.7.2
- version/mozilla firefox/1.7.3