CVE-2004-1121

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.htmlPatch, Vendor Advisory
http://secunia.com/advisories/13047/Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/925430Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11573Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17909
http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.htmlPatch, Vendor Advisory
http://secunia.com/advisories/13047/Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/925430Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11573Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17909

Timeline

Published: Nov 1, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-11227.5Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof CVE-2004-11235.0Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESC CVE-2004-11244.6Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized ac CVE-2004-11259.3Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3 CVE-2004-112710.0Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectA CVE-2004-112810.0Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.CVE-2004-112910.0SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allo CVE-2004-11306.8Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via CVE-2004-11317.2Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long comm CVE-2004-11336.8Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and CVE-2004-113410.0Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary CVE-2004-11355.0Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1)