CVE

Id
9584  
CVE No.
CVE-2004-1156  
Status
Candidate  
Description
Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.  
Phase
Assigned (20041208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
65030 9584 CVE-2004-1156 MISC:http://secunia.com/secunia_research/2004-13/advisory/  View
65031 9584 CVE-2004-1156 MISC:http://secunia.com/multiple_browsers_window_injection_vulnerability_test/  View
65032 9584 CVE-2004-1156 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-13.html  View
65033 9584 CVE-2004-1156 GENTOO:GLSA-200503-10  View
65034 9584 CVE-2004-1156 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml  View
65035 9584 CVE-2004-1156 GENTOO:GLSA-200503-30  View
65036 9584 CVE-2004-1156 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml  View
65037 9584 CVE-2004-1156 REDHAT:RHSA-2005:176  View
65038 9584 CVE-2004-1156 URL:http://www.redhat.com/support/errata/RHSA-2005-176.html  View
65039 9584 CVE-2004-1156 REDHAT:RHSA-2005:384  View
65040 9584 CVE-2004-1156 URL:http://www.redhat.com/support/errata/RHSA-2005-384.html  View
65041 9584 CVE-2004-1156 OVAL:oval:org.mitre.oval:def:100045  View
65042 9584 CVE-2004-1156 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100045  View
65043 9584 CVE-2004-1156 OVAL:oval:org.mitre.oval:def:10117  View
65044 9584 CVE-2004-1156 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10117  View
65045 9584 CVE-2004-1156 SECUNIA:13129  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63175 JVNDB-2004-000517 Opera のクロスドメインセキュリティチェック機能におけるコンテンツ表示を制御される脆弱性 ------------ CVE-2004-1157 9584 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000517.html  View