| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≤ 29.0.1 | |
| thunderbird | = 24.0= 24.0.1= 24.1= 24.1.1= 24.2= 24.3= 24.4= 24.5≤ 24.6 |
Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free