Lucene search

K
mozillaMozilla FoundationMFSA2013-112
HistoryDec 10, 2013 - 12:00 a.m.

Linux clipboard information disclosure though selection paste — Mozilla

2013-12-1000:00:00
Mozilla Foundation
www.mozilla.org
23

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

58.4%

Mozilla community member Vincent Lefevre reported that on Linux systems, web content can access data saved to the clipboard when a user attempts to paste a selection with a middle-click instead of pasting the selection content. This allows for possibly private data in the clipboard to be inadvertently disclosed to web content. Windows and OS X systems are not affected by this issue.

Affected configurations

Vulners
Node
mozillafirefoxRange<26
OR
mozillaseamonkeyRange<2.23
CPENameOperatorVersion
firefoxlt26
seamonkeylt2.23

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

58.4%