CVE

Id
9809  
CVE No.
CVE-2004-1381  
Status
Candidate  
Description
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.  
Phase
Assigned (20050125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66870 9809 CVE-2004-1381 OVAL:oval:org.mitre.oval:def:100053  View
66871 9809 CVE-2004-1381 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100053  View
66872 9809 CVE-2004-1381 SECUNIA:12712  View
66873 9809 CVE-2004-1381 URL:http://secunia.com/advisories/12712  View
66874 9809 CVE-2004-1381 MISC:http://secunia.com/multiple_browsers_dialog_box_spoofing_test/  View
66875 9809 CVE-2004-1381 MISC:http://secunia.com/multiple_browsers_form_field_focus_test/  View
66876 9809 CVE-2004-1381 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-05.html  View
66877 9809 CVE-2004-1381 XF:web-browser-inactive-info-disclosure(17789)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63033 JVNDB-2004-000375 glibc の glibcbug スクリプトにおけるシンボリックリンク攻撃を受ける脆弱性 ------------ CVE-2004-1382 9809 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000375.html  View