Lucene search

Ubuntu.comUB:CVE-2011-3866

HistorySep 29, 2011 - 12:00 a.m.

CVE-2011-3866

2011-09-2900:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

64.5%

JSON

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly
restrict availability of motion data events, which makes it easier for
remote attackers to read keystrokes by leveraging JavaScript code running
in a background tab.

Bugs

<https://bugzilla.mozilla.org/show_bug.cgi?id=682562>

Notes

Author	Note
jdstrand	does not affect firefox 3.6

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchfirefox< 7.0.1+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.04	noarch	firefox	< 7.0.1+build1+nobinonly-0ubuntu0.11.04.1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2011-3866

nvd.nist.gov/vuln/detail/CVE-2011-3866

security-tracker.debian.org/tracker/CVE-2011-3866

ubuntu.com/security/notices/USN-1222-1

www.cve.org/CVERecord?id=CVE-2011-3866

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.002

Percentile

64.5%

JSON

Related for UB:CVE-2011-3866