Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-6608
HistoryJul 09, 2024 - 3:15 p.m.

CVE-2024-6608

2024-07-0915:15:12
Debian Security Bug Tracker
security-tracker.debian.org
2
cursor movement
pointerlock
firefox vulnerability
unix

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

21.3%

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 128.0-1firefox_128.0-1_all.deb

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

21.3%