What’s Vulnerable › Vulnerabilities

CVE-2004-1381

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-10-20 · updated 2026-06-16

Description

Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.

Affected products

• Mozilla Firefox: 0.8, 0.9, 0.9-rc, 0.9.1, 0.9.2, 0.9.3 (+2)
• Mozilla: 1.3, 1.4, 1.4-alpha, 1.4.1, 1.5, 1.5-alpha (+15)

References

• http://secunia.com/advisories/12712
• http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
• http://secunia.com/multiple_browsers_form_field_focus_test/
• http://www.mozilla.org/security/announce/mfsa2005-05.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17789
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053
• http://secunia.com/advisories/12712
• http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
• http://secunia.com/multiple_browsers_form_field_focus_test/
• http://www.mozilla.org/security/announce/mfsa2005-05.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17789
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053

Get alerted when CVE-2004-1381 or the next vulnerability affects your stack