Vulnerability in Mozilla Firefox

CVE-2011-3866

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.

EPSS: 0.014 (69.1th percentile) — read the EPSS interpretation.

Affected products

Mozilla Firefox
Mozilla Seamonkey
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
cve@mitre.org (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)