CVE-2004-1753

Description

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17137

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-1747

http://www.securityfocus.com/bid/11059

http://www.securityfocus.com/archive/1/373309

http://www.securityfocus.com/archive/1/373232

http://www.securityfocus.com/archive/1/373080

http://secunia.com/advisories/12392

http://bugzilla.mozilla.org/show_bug.cgi?id=162134

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS