Summary
It was discovered that no user notification was given when pointer lock is
enabled. If a user were tricked in to opening a specially crafted website,
an attacker could potentially exploit this to hijack the mouse pointer and
confuse users.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 69.0.1+build1-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 69.0.1+build1-0ubuntu0.18.04.1 |
Vulnerabilities 1
-
Unscored —
When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could al…
References
-
report
https://ubuntu.com/security/CVE-2019-11754