CVE-2004-1122 in Safari
Summary
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 919 | Apple Safari Tabs Browsing Dialog Boxes authentication spoofing | 290 | Proof-of-Concept | Official fix | CVE-2004-1122 |
Reservation
12/01/2004
Disclosure
01/10/2005
Status
Confirmed
Entries
1