CVE-2004-1156

CVE-2004-1156 is a "window injection" vulnerability affecting Mozilla before version 1.7.6 and Firefox before 1.0.1. This flaw allows remote attackers to spoof arbitrary websites by injecting content from one window into another, even if they are from different domains, typically using a pop-up window on a trusted site. The vulnerability has a CVSS score of 4.3, indicating medium attack complexity and potential for partial integrity impact, as an attacker could trick users into believing they are on a legitimate site. There is no known active exploitation, publicly available exploit code, or Metasploit/Nuclei modules, though it has garnered significant community discussion.