Back to search
CVE-2011-3866
Published: Sep 29, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.mozilla.org/security/announce/2011/mfsa2011-45.html
x_refsource_CONFIRM
oval:org.mitre.oval:def:13954
vdb-entry
signature
x_refsource_OVAL
https://bugzilla.mozilla.org/show_bug.cgi?id=682562
x_refsource_CONFIRM
http://www.usenix.org/events/hotsec11/tech/tech.html#Cai
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now