First published: Tue Jul 09 2024(Updated: )
It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the application window.
Credit: security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Firefox | <128.0 | |
Mozilla Thunderbird | <128.0 | |
Mozilla Thunderbird | <128 | 128 |
Mozilla Firefox | <128 | 128 |
debian/firefox | 131.0.2-2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2024-6608 is considered a high severity vulnerability due to its potential to manipulate cursor control.
To fix CVE-2024-6608, update to Mozilla Firefox or Mozilla Thunderbird version 128 or later.
CVE-2024-6608 affects versions of Mozilla Firefox and Thunderbird before 128.0.
CVE-2024-6608 could allow an attacker to move the user's cursor outside the viewport, leading to user interface manipulation.
No known workarounds exist for CVE-2024-6608; applying the update is recommended for protection.