5

CVE-2014-1539

Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 29.0.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version <= 24.6
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.0
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.0.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.1.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.2
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.3
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.4
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.5
   Apple ≫ macOS X
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.15% 0.798
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://security.gentoo.org/glsa/201504-01
http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html
http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html
http://secunia.com/advisories/59171
http://secunia.com/advisories/59387
http://secunia.com/advisories/59486
http://www.securitytracker.com/id/1030388
http://www.mozilla.org/security/announce/2014/mfsa2014-50.html
Vendor Advisory
http://www.securityfocus.com/bid/67967
https://bugzilla.mozilla.org/show_bug.cgi?id=995603