CVE-2004-1122

EPSS 0.79%
Veröffentlicht 10.01.2005 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version1.2.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.79%	0.715

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html

http://secunia.com/multiple_browsers_dialog_box_spoofing_test/

Vendor Advisory

http://secunia.com/advisories/12892

http://secunia.com/secunia_research/2004-10/

https://nvd.nist.gov/vuln/detail/CVE-2004-1122

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1122

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1122

EUVD