PT-2008-2217 · Mozilla+1 · Firefox+2
Lcamtuf
+1
·
Published
2008-02-08
·
Updated
2024-12-12
·
CVE-2008-0591
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 2.0.0.12
Thunderbird versions prior to 2.0.0.12
Description
The issue is related to the management of a delay timer used in confirmation dialogs. This might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, also known as the "dialog refocus bug" or "ffclick2".
Recommendations
For Mozilla Firefox versions prior to 2.0.0.12, update to version 2.0.0.12 or later to resolve the issue.
For Thunderbird versions prior to 2.0.0.12, update to version 2.0.0.12 or later to resolve the issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Firefox
Red Hat
Thunderbird