The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-02-26T05:00:00

Updated: 2024-08-08T01:00:37.238Z

Reserved: 2005-02-26T00:00:00

Link: CVE-2004-1753

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2004-12-31T05:00:00.000

Modified: 2024-11-20T23:51:39.660

Link: CVE-2004-1753

cve-icon Redhat

No data.