Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-1753

Description

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mozilla Corporation/Firefox
cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*
Mozilla Corporation/Mozilla
cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*
Netscape/Navigator2 versions
cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*
Apple Inc./Java pluginllm-create

Patches

Vulnerability mechanics

References

bugzilla.mozilla.org/show_bug.cginvdExploit
www.securityfocus.com/archive/1/373080nvdExploit
www.securityfocus.com/archive/1/373232nvdExploit
www.securityfocus.com/archive/1/373309nvdExploit
www.securityfocus.com/bid/11059nvdExploit
secunia.com/advisories/12392nvd
exchange.xforce.ibmcloud.com/vulnerabilities/17137nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000