CVE-2011-3866 | BDVDB-2026-47525 Detail

Description#

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly restrict availability of motion data events, which makes it easier for remote attackers to read keystrokes by leveraging JavaScript code running in a background tab.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.mozilla.org/security/announce/2011/mfsa2011-45.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13954
https://bugzilla.mozilla.org/show_bug.cgi?id=682562
http://www.usenix.org/events/hotsec11/tech/tech.html#Cai

Exploit#

No public exploit known

History#

Version 12011-09-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.