Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mozilla
Published: 2014-06-11T10:00:00
Updated: 2024-08-06T09:42:36.301Z
Reserved: 2014-01-16T00:00:00
Link: CVE-2014-1539
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-06-11T10:57:17.893
Modified: 2017-12-28T02:29:01.003
Link: CVE-2014-1539
Redhat
No data.