The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T01:00:37.238Z
Reserved: 2005-02-26T00:00:00
Link: CVE-2004-1753

No data.

Status : Modified
Published: 2004-12-31T05:00:00.000
Modified: 2024-11-20T23:51:39.660
Link: CVE-2004-1753

No data.