Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1122
safari
browser security
dialog box spoofing
remote attack
cve-2004-1122
6.7 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the “Dialog Box Spoofing Vulnerability,” a different vulnerability than CVE-2004-1314.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:safari | apple safari | eq | 1.2.3 |
Related
cve
cve
CVE-2004-1314
2005-01-10 05:00:00
CVE-2004-1159
2005-01-10 05:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2005-001)
2005-01-26 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2004-12-02)
2004-12-02 00:00:00
MacOS X Version Unsupported
2004-07-06 00:00:00
6.7 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
Related for CVE-2004-1122