Description
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
References
- 11179 vdb-entry
- VU#460528 third-party-advisory
- SUSE-SA:2004:036 vendor-advisory
- FLSA:2089 vendor-advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=257523
- oval:org.mitre.oval:def:9745 vdb-entry signature
- http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
- GLSA-200409-26 vendor-advisory
- mozilla-shortcut-clipboard-access(17376) vdb-entry
- SSRT4826 vendor-advisory
- 12526 third-party-advisory