CVE-2004-1381 | BDVDB-2026-7806 Detail
Description#
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053
- http://www.mozilla.org/security/announce/mfsa2005-05.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17789
- http://secunia.com/multiple_browsers_form_field_focus_test/
- http://secunia.com/advisories/12712
- http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.