CVE-2004-1381

2004-10-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

firefox

mozilla

cve-2004-1381

security vulnerability

phishing

sensitive data theft

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.341 Low

EPSS

Percentile

97.0%

JSON

Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxeq0.8
mozilla:mozillamozillaeq1.7
mozilla:mozillamozillaeq1.5
mozilla:firefoxmozilla firefoxeq0.9.1
mozilla:firefoxmozilla firefoxeq0.10.1
mozilla:firefoxmozilla firefoxeq0.9
mozilla:mozillamozillaeq1.6
mozilla:mozillamozillaeq1.4.1
mozilla:mozillamozillaeq1.3
mozilla:mozillamozillaeq1.4

CPE	Name	Operator	Version
mozilla:firefox	mozilla firefox	eq	0.8
mozilla:mozilla	mozilla	eq	1.7
mozilla:mozilla	mozilla	eq	1.5
mozilla:firefox	mozilla firefox	eq	0.9.1
mozilla:firefox	mozilla firefox	eq	0.10.1
mozilla:firefox	mozilla firefox	eq	0.9
mozilla:mozilla	mozilla	eq	1.6
mozilla:mozilla	mozilla	eq	1.4.1
mozilla:mozilla	mozilla	eq	1.3
mozilla:mozilla	mozilla	eq	1.4