Every CVESearch/Get API key

CVE-2004-1380

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog...

5.0 MediumPublic exploit

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Exploit likelihood

3.68%Up 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.0

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Record
CVE-2004-1380
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE ListNo score

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Record
CVE-2004-1380
Updated
2026-11-02
EUVDEUVD-2004-1377No score

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Record
EUVD-2004-1377
Updated
2026-11-03
GitHub AdvisoriesGHSA-vv9m-2w98-m7rfNo score

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog...

Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the "Dialog Box Spoofing Vulnerability."

Record
GHSA-vv9m-2w98-m7rf
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
devhelp
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
evolution
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
evolution-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
evolution-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
devhelp
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
evolution
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
Show 14 moreShow less
Affected packages
PackageAffectedFixed
evolution-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
evolution-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
devhelp
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
evolution
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
evolution-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
evolution-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
devhelp
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
devhelp-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:0.9.2-2.4.3
0:0.9.2-2.4.3
evolution
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
evolution-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14
evolution-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 9 CVEs
before 0:2.0.2-14
0:2.0.2-14

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMultiple Browsers - Tabbed Browsing2004-10-22

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-1380 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published October 20, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.68%, the 89th percentile. No source names a fixed version.

References

Show 49 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open