CVE-2004-1314
published 2005-01-10CVE-2004-1314: Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a…
PriorityP424high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.36%
82.1th percentile
Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different vulnerability than CVE-2004-1122.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fjjm-8r2x-qmqx: Safari 1
ghsa_unreviewed·2022-04-29·CVSS 7.5
CVE-2004-1122 [HIGH] GHSA-fjjm-8r2x-qmqx: Safari 1
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
GHSA
GHSA-23rg-j4mh-2pmr: Safari 1
ghsa_unreviewed·2022-04-29·CVSS 7.5
CVE-2004-1314 [HIGH] GHSA-23rg-j4mh-2pmr: Safari 1
Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different vulnerability than CVE-2004-1122.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.htmlhttp://secunia.com/advisories/13252/http://secunia.com/multiple_browsers_window_injection_vulnerability_test/http://secunia.com/secunia_research/2004-13/advisory/https://exchange.xforce.ibmcloud.com/vulnerabilities/18397http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.htmlhttp://secunia.com/advisories/13252/http://secunia.com/multiple_browsers_window_injection_vulnerability_test/http://secunia.com/secunia_research/2004-13/advisory/https://exchange.xforce.ibmcloud.com/vulnerabilities/18397
2005-01-10
Published