If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1795815 | Issue Tracking Permissions Required Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2022-47/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2022-48/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2022-49/ | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2022-12-22T00:00:00
Updated: 2022-12-22T00:00:00
Reserved: 2022-11-14T00:00:00
Link: CVE-2022-45418
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-12-22T20:15:44.780
Modified: 2023-01-04T18:41:43.017
Link: CVE-2022-45418
JSON object: View
Redhat Information
No data.
CWE