CVE-2009-0253: Medium severity Mozilla Firefox vulnerability
Published Jan 22, 2009
·Updated
Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack.
Affected Software
1 affected component
Mozilla Firefox=3.0.5
Event History
Jan 22, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0253?
CVE-2009-0253 is classified as a moderate severity vulnerability that may lead to user redirection without consent.
2
How do I fix CVE-2009-0253?
To fix CVE-2009-0253, upgrade Mozilla Firefox to version 3.0.6 or later.
3
What types of attacks does CVE-2009-0253 involve?
CVE-2009-0253 involves clickjacking attacks that utilize status bar obfuscation techniques.
4
Who is affected by CVE-2009-0253?
CVE-2009-0253 affects users of Mozilla Firefox version 3.0.5.
5
What can attackers achieve with CVE-2009-0253?
Attackers can use CVE-2009-0253 to trick users into visiting arbitrary URLs by manipulating mouse click actions.