PT-2008-2217 · Mozilla+1 · Firefox+2

Lcamtuf

+1

·

Publicado

2008-02-08

·

Atualizado

2024-12-12

·

CVE-2008-0591

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 2.0.0.12 Thunderbird versions prior to 2.0.0.12
Description The issue is related to the management of a delay timer used in confirmation dialogs. This might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, also known as the "dialog refocus bug" or "ffclick2".
Recommendations For Mozilla Firefox versions prior to 2.0.0.12, update to version 2.0.0.12 or later to resolve the issue. For Thunderbird versions prior to 2.0.0.12, update to version 2.0.0.12 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2008-0591
DSA-1484-1
DSA-1485-2
DSA-1489-1
DSA-1506-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
RHSA-2008:0103
RHSA-2008:0104
RHSA-2008:0105
RHSA-2008_0103
RHSA-2008_0104
RHSA-2008_0105

Produtos afetados

Firefox
Red Hat
Thunderbird