Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-11754

Опубликовано: 27 сент. 2019
Источник: debian
EPSS Низкий

Описание

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed69.0.1-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2019-31/#CVE-2019-11754

EPSS

Процентиль: 40%
0.00186
Низкий

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 6 лет назад

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

CVSS3: 4.3
redhat
больше 6 лет назад

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

CVSS3: 4.3
nvd
больше 6 лет назад

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

github
больше 3 лет назад

When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given. This could allow a malicious website to hijack the mouse pointer and confuse users. This vulnerability affects Firefox < 69.0.1.

CVSS3: 4.3
fstec
больше 6 лет назад

Уязвимость функции requestPointerLock() веб-браузера Firefox, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 40%
0.00186
Низкий