We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-6607



Description

It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts. This could be used to confuse a user into giving a site unintended permissions. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Reserved 2024-07-09 | Published 2024-07-09 | Updated 2024-09-12 | Assigner mozilla

Problem types

Leaving pointerlock by pressing the escape key could be prevented

Product status

Any version before 128
affected

Any version before 128
affected

Credits

Irvan Kurniawan

References

bugzilla.mozilla.org/show_bug.cgi?id=1694513

www.mozilla.org/security/advisories/mfsa2024-29/

www.mozilla.org/security/advisories/mfsa2024-32/

cve.org (CVE-2024-6607)

nvd.nist.gov (CVE-2024-6607)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2024-6607

Support options

Helpdesk Chat, Email, Knowledgebase