Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Safari can show fake dialog boxes from hidden windows

CVE-2004-1122 · published 21 years ago
Summary

Versions of Safari from 1.0 up to 1.2.4 let a window that is not active create its own dialog boxes. An attacker could use this to display a counterfeit prompt that looks like it came from another site, tricking users into revealing information or clicking malicious links. Upgrade to a newer Safari release or disable the affected feature, and always verify the source of any dialog before responding.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple safari 1.2.3
cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*
Original advisory text
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the...
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Timeline
Published10 Jan 2005
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2004-1122 · NVD
Track software like this
Free during beta