CVE-2014-1539

Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV…

published June 11, 2014

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02193 · 82.2th percentile
Published
2014-06-11T10:00Z
EPSS history
Timeline
  • 11 JUN 10:00Z
    Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV…
    cvelistv5