Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-1380

Fixed in a distro release EPSS 4%

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Published 2005-01-29 · CVE record · OSV

Products: mozilla firefox, mozilla

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 4devhelp0:0.9.2-2.4.3
Red Hat Enterprise Linux 4devhelp-debuginfo0:0.9.2-2.4.3
Red Hat Enterprise Linux 4devhelp-devel0:0.9.2-2.4.3
Red Hat Enterprise Linux 4evolution0:2.0.2-14
Red Hat Enterprise Linux 4evolution-debuginfo0:2.0.2-14
Red Hat Enterprise Linux 4evolution-devel0:2.0.2-14