Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2011-3866

Опубликовано: 29 сент. 2011
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3

Описание

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.

РелизСтатусПримечание
devel

not-affected

7.0.1+build1+nobinonly-0ubuntu1
hardy

ignored

end of life
lucid

not-affected

maverick

not-affected

3.6.23+build1+nobinonly-0ubuntu0.10.10.1
natty

released

7.0.1+build1+nobinonly-0ubuntu0.11.04.1
oneiric

not-affected

7.0.1+build1+nobinonly-0ubuntu1
precise

not-affected

7.0.1+build1+nobinonly-0ubuntu1
quantal

not-affected

7.0.1+build1+nobinonly-0ubuntu1
raring

not-affected

7.0.1+build1+nobinonly-0ubuntu1
saucy

not-affected

7.0.1+build1+nobinonly-0ubuntu1

Показывать по

РелизСтатусПримечание
devel

DNE

hardy

ignored

end of life
lucid

ignored

end of life
maverick

ignored

end of life
natty

ignored

end of life
oneiric

ignored

end of life
precise

DNE

quantal

DNE

raring

DNE

saucy

DNE

Показывать по

EPSS

Процентиль: 61%
0.00418
Низкий

4.3 Medium

CVSS2

Связанные уязвимости

nvd
больше 14 лет назад

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.

debian
больше 14 лет назад

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly re ...

github
больше 3 лет назад

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.

EPSS

Процентиль: 61%
0.00418
Низкий

4.3 Medium

CVSS2