Unexpected Mouse Re-positioning

2024-02-2204:14:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

firefox

firefox esr

thunderbird

unexpected mouse re-positioning

security issue

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

Firefox, Firefox ESR, and Thunderbird are vulnerable to unexpected mouse re-positioning. The vulnerability is due to a combination of exiting fullscreen mode and using requestPointerLock on a malicious website. This could lead to the user’s mouse being re-positioned unexpectedly, causing confusion and potentially leading to the inadvertent granting of permissions the user did not intend to grant. This security issue affects Firefox versions < 123, Firefox ESR versions < 115.8, and Thunderbird versions < 115.8.

CPENameOperatorVersion
firefox:sideq81.0-2
firefox:sideq83.0-1
firefox:sideq82.0.3-1
firefox-esr:sideq78.5.0esr-1
firefox-esr:sideq78.8.0esr-1
firefox-esr:bullseyeeq78.5.0esr-1
thunderbird:sideq1:78.5.0-1
thunderbird:bullseyeeq1:78.5.0-1
firefox-esr:bustereq68.12.0esr-1~deb10u1
firefox-esr:bustereq78.11.0esr-1~deb10u1

Name	Operator	Version
firefox:sid	eq	81.0-2
firefox:sid	eq	83.0-1
firefox:sid	eq	82.0.3-1
firefox-esr:sid	eq	78.5.0esr-1
firefox-esr:sid	eq	78.8.0esr-1
firefox-esr:bullseye	eq	78.5.0esr-1
thunderbird:sid	eq	1:78.5.0-1
thunderbird:bullseye	eq	1:78.5.0-1
firefox-esr:buster	eq	68.12.0esr-1~deb10u1
firefox-esr:buster	eq	78.11.0esr-1~deb10u1