5

CVE-2014-1539

Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version <= 29.0.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version <= 24.6
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.0
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.0.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.1.1
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.2
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.3
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.4
   Apple ≫ macOS X
Mozilla ≫ Thunderbird Version24.5
   Apple ≫ macOS X
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.75% 0.723
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.