Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2015-04-01 03:59
Updated : 2016-12-06 19:02
NVD link : CVE-2015-0810
Mitre link : CVE-2015-0810
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
mozilla
- firefox
apple
- mac_os_x