CVE-2010-1125: Infoleak
The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1125?
CVE-2010-1125 has been rated with a moderate severity level as it allows an attacker to potentially steal sensitive information by sending keystrokes to hidden form fields.
How do I fix CVE-2010-1125?
To fix CVE-2010-1125, users should upgrade to Mozilla Firefox 3.5.10, 3.6.4, or later versions, or install the SeaMonkey 2.0.5 update.
What versions are affected by CVE-2010-1125?
CVE-2010-1125 affects Mozilla Firefox versions prior to 3.5.10, 3.6.4, and SeaMonkey versions prior to 2.0.5.
Can CVE-2010-1125 exploit affect user privacy?
Yes, CVE-2010-1125 can affect user privacy by allowing attackers to intercept keystrokes meant for visible forms.
What type of attack is associated with CVE-2010-1125?
CVE-2010-1125 is associated with a client-side attack that exploits the focus method in JavaScript to manipulate user input.