Oval Definition:oval:org.mitre.oval:def:100053
Revision Date:2007-05-09Version:5
Title:Mozilla Inactive Tab Form Data Theft Vulnerability
Description:Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-1381
Platform(s):Microsoft Windows 2000
Microsoft Windows NT
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):mozilla
Mozilla Firefox
Definition Synopsis
  • Mozilla Firefox version 0.9 or earlier is installed
  • Firefox version 0.9 or earlier is installed
  • AND Mozilla Firefox version 0.9 or earlier is installed
  • OR Mozilla Suite version 1.7.4 or earlier is installed
  • Mozilla Suite version 1.7.4 or earlier is installed
  • AND Mozilla Suite version 1.7.4 or earlier is installed
  • BACK