Vulnerability Description
It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 128.0 |
| Mozilla | Thunderbird | < 128.0 |
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1743329Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2024-29/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2024-32/Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1743329Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2024-29/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2024-32/Vendor Advisory
FAQ
What is CVE-2024-6608?
CVE-2024-6608 is a vulnerability with a CVSS score of 4.3 (MEDIUM). It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunder...
How severe is CVE-2024-6608?
CVE-2024-6608 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-6608?
Check the references section above for vendor advisories and patch information. Affected products include: Mozilla Firefox, Mozilla Thunderbird.