Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy, a variant of CVE-2003-0823.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2008-09-24T18:00:00
Updated: 2017-09-28T12:57:01
Reserved: 2008-08-27T00:00:00
Link: CVE-2008-3837
JSON object: View
NVD Information
Status : Analyzed
Published: 2008-09-24T20:37:04.517
Modified: 2018-11-01T15:14:40.127
Link: CVE-2008-3837
JSON object: View
Redhat Information
No data.
CWE