Improper input validation in Apple Mac OS X
CVE-2014-1539
Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.022 (80.3th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Mozilla Firefox
- Mozilla Thunderbird — versions 24.0, 24.0.1, 24.1
- N/a — versions n/a
Weakness classification (CWE)
References
- security@mozilla.org (vendor-advisory, x_refsource_SUSE)
- security@mozilla.org (x_refsource_SECUNIA, third-party-advisory)
- security@mozilla.org (vdb-entry, x_refsource_SECTRACK)
- security@mozilla.org (vendor-advisory, x_refsource_SUSE)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
- security@mozilla.org (vendor-advisory, x_refsource_GENTOO)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (vdb-entry, x_refsource_BID)
- security@mozilla.org (x_refsource_SECUNIA, third-party-advisory)
- security@mozilla.org (x_refsource_CONFIRM)