CVE:CVE-2004-1380
CNNVD:CNNVD-200410-055
Firefox 1.0之前版本和Mozilla 1.7.5之前版本允许闲置的（后台）制表符展开对话框，远程攻击者可以欺骗在其他窗口中来自于网站的对话框并且促进钓鱼攻击，也称为"Dialog Box Spoofing Vulnerability"。
solution:Upgrade mozilla firefox to a higher version than 0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1,and avoid the version 0.8,0.9,0.9:rc,0.9.1,0.9.2,0.9.3,0.10,0.10.1; Upgrade mozilla mozilla to a higher version than *,1.3,1.4,1.4:alpha,1.4.1,1.5,1.5:alpha,1.5:rc1,1.5:rc2,1.5.1,1.6,1.6:alpha,1.6:beta,1.7,1.7:alpha,1.7:beta,1.7:rc1,1.7:rc2,1.7:rc3,1.7.1,1.7.2,1.7.3,and avoid the version 1.3,1.4,1.4:alpha,1.4.1,1.5,1.5:alpha,1.5:rc1,1.5:rc2,1.5.1,1.6,1.6:alpha,1.6:beta,1.7,1.7:alpha,1.7:beta,1.7:rc1,1.7:rc2,1.7:rc3,1.7.1,1.7.2,1.7.3