CVE-2004-1380: Medium severity Mozilla Firefox vulnerability
Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1380?
CVE-2004-1380 is considered to have a moderate severity as it can facilitate phishing attacks through dialog box spoofing.
How do I fix CVE-2004-1380?
To fix CVE-2004-1380, you should upgrade to a version of Mozilla Firefox or Mozilla that is 1.0 or later and ensure your software is up to date.
What type of attack can CVE-2004-1380 enable?
CVE-2004-1380 can enable remote attackers to spoof dialog boxes, potentially leading to phishing attacks.
Which versions of software are affected by CVE-2004-1380?
CVE-2004-1380 affects Firefox versions before 1.0 and Mozilla versions before 1.7.5.
Is CVE-2004-1380 still relevant today?
While CVE-2004-1380 pertains to older versions of browsers, it highlights ongoing issues with dialog box handling that may still exist in some form in modern software.