CVE-2024-6608

Summary

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Affected Software

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1743329
• https://www.mozilla.org/security/advisories/mfsa2024-29/
• https://www.mozilla.org/security/advisories/mfsa2024-32/

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1743329
• https://www.mozilla.org/security/advisories/mfsa2024-29/
• https://www.mozilla.org/security/advisories/mfsa2024-32/

• ←Previous
• Next→