Lucene search

K
mozillaMozilla FoundationMFSA2015-35
HistoryMar 31, 2015 - 12:00 a.m.

Cursor clickjacking with flash and images — Mozilla

2015-03-3100:00:00
Mozilla Foundation
www.mozilla.org
16

0.005 Low

EPSS

Percentile

75.2%

Security researcher Jordi Chancel reported a mechanism that made cursor invisible through flash content and then replaced it through the layering of HTML content. This flaw can be in used in combination with an image of the cursor manipulated through JavaScript, leading to clickjacking during subsequent interactions with HTML content.

CPENameOperatorVersion
firefoxlt37
seamonkeylt2.35