Unscored CVE-2011-3866 EUVD-2011-3823GHSA-4wmv-p7gx-jgg9

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for …

Published Sep 29, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.

References

http://www.mozilla.org/security/announce/2011/mfsa2011-45.html
oval:org.mitre.oval:def:13954 vdb-entry signature
https://bugzilla.mozilla.org/show_bug.cgi?id=682562
http://www.usenix.org/events/hotsec11/tech/tech.html#Cai