Lucene search

MitreCVE-2004-1122

HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1122

2005-01-1005:00:00

mitre

web.nvd.nist.gov

safari

browser security

dialog box spoofing

remote attack

cve-2004-1122

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.015

Percentile

86.8%

JSON

Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the “Dialog Box Spoofing Vulnerability,” a different vulnerability than CVE-2004-1314.

Affected configurations

Nvd

Node

applesafariMatch1.2.3

VendorProductVersionCPE
applesafari1.2.3cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	safari	1.2.3	cpe:2.3:a:apple:safari:1.2.3:::::::*

References

lists.apple.com/archives/security-announce/2004/Dec/msg00000.html

secunia.com/advisories/12892

secunia.com/multiple_browsers_dialog_box_spoofing_test/

secunia.com/secunia_research/2004-10/

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.015

Percentile

86.8%

JSON

Related for CVE-2004-1122