CVEvulnerability
CVE-2011-3866
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-09-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.
Affected configurations
• mozilla firefox (<= 7.0)
• mozilla seamonkey (< 2.4)
Related
Weakness · not in database (1)
References
- http://www.mozilla.org/security/announce/2011/mfsa2011-45.html Vendor Advisory
- http://www.usenix.org/events/hotsec11/tech/tech.html#Cai Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=682562 Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13954 Third Party Advisory
- http://www.mozilla.org/security/announce/2011/mfsa2011-45.html Vendor Advisory
- http://www.usenix.org/events/hotsec11/tech/tech.html#Cai Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=682562 Issue Tracking, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13954 Third Party Advisory