Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2014-06-11T10:00:00
Updated: 2017-12-27T18:57:01
Reserved: 2014-01-16T00:00:00
Link: CVE-2014-1539
JSON object: View
NVD Information
Status : Modified
Published: 2014-06-11T10:57:17.893
Modified: 2017-12-28T02:29:01.003
Link: CVE-2014-1539
JSON object: View
Redhat Information
No data.
CWE