VULNERABILITY INTELLIGENCE

CVE-2004-1380

CVSS score5 MEDIUM
EPSS probability3.68%
CISA KEVNot currently listed
Published2004-10-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Primary references