vulnwire
7.5high

CVE-2004-1122

Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.3%
percentile 84%
Public exploits
0
none known

Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.

Exploit prediction (EPSS)

2.34% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • secunia.com /secunia_research/2004-10/ · x_refsource_MISC, x_transferred
  • secunia.com /advisories/12892 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.apple.com /archives/security-announce/2004/Dec/msg00000.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • secunia.com /multiple_browsers_dialog_box_spoofing_test/ · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.