Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.
References
| Link | Resource |
|---|---|
| http://www.mozilla.org/security/announce/2011/mfsa2011-45.html | Vendor Advisory |
| http://www.usenix.org/events/hotsec11/tech/tech.html#Cai | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=682562 | Issue Tracking Vendor Advisory |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13954 | Third Party Advisory |
| http://www.mozilla.org/security/announce/2011/mfsa2011-45.html | Vendor Advisory |
| http://www.usenix.org/events/hotsec11/tech/tech.html#Cai | Third Party Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=682562 | Issue Tracking Vendor Advisory |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13954 | Third Party Advisory |
Configurations
History
21 Nov 2024, 01:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.mozilla.org/security/announce/2011/mfsa2011-45.html - Vendor Advisory | |
| References | () http://www.usenix.org/events/hotsec11/tech/tech.html#Cai - Third Party Advisory | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=682562 - Issue Tracking, Vendor Advisory | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13954 - Third Party Advisory |
Information
Published : 2011-09-29 00:55
Updated : 2024-11-21 01:31
NVD link : CVE-2011-3866
Mitre link : CVE-2011-3866
CVE.ORG link : CVE-2011-3866
JSON object : View
Products Affected
mozilla
- firefox
- seamonkey
CWE
CWE-264
Permissions, Privileges, and Access Controls