CVE-2004-1155

Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.

• http://secunia.com/advisories/13251/
• http://secunia.com/advisories/22628
• http://secunia.com/multiple_browsers_window_injection_vulnerability_test/Vendor Advisory
• http://secunia.com/secunia_research/2004-13/advisory/
• http://www.securityfocus.com/archive/1/449917/100/0/threaded
• http://www.securityfocus.com/bid/11855Exploit, Vendor Advisory
• http://secunia.com/advisories/13251/
• http://secunia.com/advisories/22628
• http://secunia.com/multiple_browsers_window_injection_vulnerability_test/Vendor Advisory
• http://secunia.com/secunia_research/2004-13/advisory/
• http://www.securityfocus.com/archive/1/449917/100/0/threaded
• http://www.securityfocus.com/bid/11855Exploit, Vendor Advisory

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1149Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, incl…
• CVE-2004-1150Stack-based buffer overflow in the in_cdda.dll plugin for Wi…
• CVE-2004-1151Multiple buffer overflows in the (1) sys32_ni_syscall and (2…
• CVE-2004-1152Buffer overflow in the mailListIsPdf function in Adobe Acrob…
• CVE-2004-1153Format string vulnerability in Adobe Acrobat Reader 6.0.0 th…
• CVE-2004-1154Integer overflow in the Samba daemon (smbd) in Samba 2.x and…
• CVE-2004-1156Mozilla before 1.7.6, and Firefox before 1.0.1, allows remot…
• CVE-2004-1157Opera 7.x up to 7.54, and possibly other versions, allows re…
• CVE-2004-1158Konqueror 3.x up to 3.2.2-6, and possibly other versions, al…
• CVE-2004-1159Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-1160Netscape 7.x to 7.2, and possibly other versions, allows rem…
• CVE-2004-1161rssh 2.2.2 and earlier does not properly restrict programs t…