CVE-2004-1381
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input...
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
Exploit likelihood
What each source reports
NVD Score used
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
CVE-2004-1381- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
CVE-2004-1381- Updated
- 2026-11-02
EUVDEUVD-2004-1378 No score
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
EUVD-2004-1378- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhqx-qfww-wwhc No score
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input...
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
- Record
GHSA-hhqx-qfww-wwhc- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Multiple Browsers - Tabbed Browsing | 2004-10-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1381 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published October 20, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.88%, the 94th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053
mozilla.org/security/announce/mfsa2005-05.html
exchange.xforce.ibmcloud.com/vulnerabilities/17789
secunia.com/multiple_browsers_form_field_focus_test
nvd.nist.gov/vuln/detail/CVE-2004-1381
github.com/advisories/GHSA-hhqx-qfww-wwhc