CVE

Id
9742  
CVE No.
CVE-2004-1314  
Status
Candidate  
Description
Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different vulnerability than CVE-2004-1122.  
Phase
Assigned (20041221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66113 9742 CVE-2004-1314 MISC:http://secunia.com/secunia_research/2004-13/advisory/  View
66114 9742 CVE-2004-1314 SECUNIA:13252  View
66115 9742 CVE-2004-1314 URL:http://secunia.com/advisories/13252/  View
66116 9742 CVE-2004-1314 MISC:http://secunia.com/multiple_browsers_window_injection_vulnerability_test/  View
66117 9742 CVE-2004-1314 APPLE:APPLE-SA-2005-01-25  View
66118 9742 CVE-2004-1314 URL:http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html  View
66119 9742 CVE-2004-1314 XF:web-browser-popup-spoofing(18397)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63263 JVNDB-2004-000624 phpBB における highlight パラメータの脆弱性を対象とする侵害活動 phpBB は、入力された URL に含まれるパラメーターの処理に問題を含んでいます。 CVE-2004-1315 9742 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000624.html  View