« Volver al listado

CVE-2004-1381

Estado: ModificadaMedia (5)—💥 Exploit

Firefox anterior a 1.0 y Mozilla anterior a 1.7.5 permiten que las pestañas inactivas (en segundo plano) tomen el foco sobre la entrada de datos que se está introduciendo en la pestaña activa, como se informó originalmente utilizando campos de formulario, lo que permite a atacantes remotos robar datos sensibles destinados a otros sitios, lo que podría facilitar ataques de phishing.

Traducción automática del texto original de NVD (en inglés).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (2)

Mozilla — FirefoxMozilla — Mozilla

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-1381",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-10-20T04:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/12712",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/multiple_browsers_dialog_box_spoofing_test/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/multiple_browsers_form_field_focus_test/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mozilla.org/security/announce/mfsa2005-05.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17789",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/12712",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/multiple_browsers_dialog_box_spoofing_test/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/multiple_browsers_form_field_focus_test/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mozilla.org/security/announce/mfsa2005-05.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17789",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks."
    }
  ],
  "lastModified": "2026-06-16T22:07:35.603",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93C142C5-3A85-432B-80D6-2E7B1B4694F4"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2434FCE7-A50B-4527-9970-C7224B31141C"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5633FB6E-D623-49D4-9858-4E20E64DE458"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5F0DC80-5473-465C-9D7F-9589F1B78E12"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "567FF916-7DE0-403C-8528-7931A43E0D18"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "010B34F4-910E-4515-990B-8E72DF009578"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10E59CDD-9F95-4E38-95B3-AC5C35075378"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C656A621-BE62-4BB8-9B25-A3916E60FA12"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED69BEB9-8D83-415B-826D-9D17FB67976B"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCDB64E5-AE26-43DF-8A66-654D5D22A635"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D8CB42F-8F05-45A6-A408-50A11CC132DA"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "407F69BE-4026-4B26-AC31-11E7CC942760"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E8264B5-4D4B-453D-B599-E2AD533A0CF9"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED9D75F1-8333-43DE-A08B-142E4C5899D4"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BF63077-4E98-497D-8CE6-B84B022DB21D"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FEC6B13-3088-4ECB-9D81-6480F439601C"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20ECA520-780A-4EF8-8C80-B7564F4148B2"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCEAEDEB-0EE7-4221-B9B8-65438580D331"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F610FFD5-DF37-4075-AE8B-8D89DF6205A8"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D093FD25-94C8-49B8-A452-438023BFB105"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3346E7D0-D7EF-4182-BD86-837F14EEB9FA"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "150F1B28-0FAB-4880-B1D5-7F244A1C4D31"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FE7EA3B-3BF8-4696-9488-78506074D62D"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"
            },
            {
              "criteria": "cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C883B45F-D28D-428E-AAF7-F93522A229DC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}