THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-6607

Assignermozilla
Reserved2024-07-09
Published2024-07-09
Updated2024-07-17

Description

It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Problem types

Leaving pointerlock by pressing the escape key could be prevented

Product status

Any version before 128
affected

Any version before 128
affected

Credits

Irvan Kurniawan

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1694513

https://www.mozilla.org/security/advisories/mfsa2024-29/

https://www.mozilla.org/security/advisories/mfsa2024-32/

cve.org CVE-2024-6607

nvd.nist.gov CVE-2024-6607

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-6607
© Copyright 2024 THREATINT. Made in Cyprus with +