{"id":"CVE-2004-1380","aliases":["EUVD-2004-1377","GHSA-vv9m-2w98-m7rf","RHSA-2005:335"],"status":"published","title":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog...","description":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the \"Dialog Box Spoofing Vulnerability.\"","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03682,"percentile":0.89758,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-10-20T04:00:00Z","modified":"2026-06-26T10:02:49Z","exploits":[{"source":"exploitdb","id":"EDB-589","title":"Multiple Browsers - Tabbed Browsing","type":"remote","platform":"windows","date":"2004-10-22","verified":true,"url":"https://www.exploit-db.com/exploits/589"}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"devhelp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2-2.4.3"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"evolution-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"evolution-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.2-14"}]}],"bundled":9}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"mozilla"}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-05.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18864","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-335.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_form_field_focus_test/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12712","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_dialog_box_spoofing_test/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1380","tags":["advisory"]},{"url":"http://secunia.com/multiple_browsers_dialog_box_spoofing_test"},{"url":"http://secunia.com/multiple_browsers_form_field_focus_test"},{"url":"https://github.com/advisories/GHSA-vv9m-2w98-m7rf"},{"url":"https://access.redhat.com/errata/RHSA-2005:335","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=142508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=144228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=146188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=147397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=150866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=151730","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_335.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617409","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1380","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0141","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0142","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617473","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0146","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617475","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0149","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0399","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0399","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-0401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617519","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0401","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2004-1380","description":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the \"Dialog Box Spoofing Vulnerability.\"","status":"published","published":"2005-01-29T05:00:00Z","modified":"2024-08-08T00:46:12.445Z","updated_at":"2026-11-02T14:34:54.398187Z"}],"euvd":[{"id":"EUVD-2004-1377","description":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the \"Dialog Box Spoofing Vulnerability.\"","status":"published","published":"2005-01-29T05:00:00Z","modified":"2024-08-08T00:46:12Z","updated_at":"2026-11-03T01:15:15.165388Z"}],"ghsa":[{"id":"GHSA-vv9m-2w98-m7rf","title":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog...","description":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the \"Dialog Box Spoofing Vulnerability.\"","status":"published","published":"2022-04-29T02:59:27Z","modified":"2025-04-03T04:02:38Z","updated_at":"2026-11-02T15:00:39.470148Z"}],"nvd":[{"id":"CVE-2004-1380","description":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the \"Dialog Box Spoofing Vulnerability.\"","status":"published","published":"2004-10-20T04:00:00Z","modified":"2026-06-16T22:07:35.463Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.000028Z"}],"osv":[{"id":"RHSA-2005:335","title":"Red Hat Security Advisory: mozilla security update","status":"published","published":"2024-09-15T15:21:22Z","modified":"2026-06-26T10:02:49Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}