Lucene search

[email protected]NVD:CVE-2004-1753

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-1753

2004-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

Low

EPSS

0.006

Percentile

78.6%

JSON

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.

Affected configurations

Nvd

Node

mozillafirefoxMatch0.9.3

mozillamozillaMatch1.7.2

netscapenavigatorMatch7.1

netscapenavigatorMatch7.2

VendorProductVersionCPE
mozillafirefox0.9.3cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*
mozillamozilla1.7.2cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*
netscapenavigator7.1cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*
netscapenavigator7.2cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	0.9.3	cpe:2.3:a:mozilla:firefox:0.9.3:::::::*
mozilla	mozilla	1.7.2	cpe:2.3:a:mozilla:mozilla:1.7.2:::::::*
netscape	navigator	7.1	cpe:2.3:a:netscape:navigator:7.1:::::::*
netscape	navigator	7.2	cpe:2.3:a:netscape:navigator:7.2:::::::*

References

bugzilla.mozilla.org/show_bug.cgi?id=162134

secunia.com/advisories/12392

www.securityfocus.com/archive/1/373080

www.securityfocus.com/archive/1/373232

www.securityfocus.com/archive/1/373309

www.securityfocus.com/bid/11059

exchange.xforce.ibmcloud.com/vulnerabilities/17137

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

Low

EPSS

0.006

Percentile

78.6%

JSON

Related for NVD:CVE-2004-1753

cvelist1 cve1