CVE-2004-1314

CVE-2004-1314 describes a window injection vulnerability in Apple Safari 1.x, allowing remote attackers to spoof websites. An attacker could inject content from one window into another window from a different domain, specifically targeting pop-up windows on trusted sites. This vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.