PT-2018-1349 · Mozilla+1 · Firefox+1

Ron Warholic · Published 2018-01-23 · Updated 2024-12-12 · CVE-2018-5110

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 58

Description The issue is related to cursor visibility when toggled by a script, causing the cursor to be temporarily invisible. This problem only affects OS X, with other operating systems not being affected. The vulnerability can be exploited by a remote attacker using a specially crafted script to make the cursor invisible when hovering over certain web page elements.

Recommendations For versions prior to 58, update to version 58 or later to resolve the issue. As a temporary workaround, consider avoiding the use of scripts that toggle cursor visibility to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2018-1178

BDU:2018-00872

CVE-2018-5110

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox

References · 1870

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5110 · Security Note
• https://osv.dev/vulnerability/CVE-2018-5110 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00872 · Security Note
• https://mozilla.org/security/advisories/mfsa2018-02 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10600-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-25728 · Note
• https://suse.com/security/cve/CVE-2022-31743 · Note
• https://suse.com/security/cve/CVE-2018-12392 · Note
• https://suse.com/security/cve/CVE-2024-5698 · Note
• https://suse.com/security/cve/CVE-2013-1701 · Note
• https://suse.com/security/cve/CVE-2024-5687 · Note
• https://suse.com/security/cve/CVE-2022-24713 · Note
• https://suse.com/security/cve/CVE-2014-8642 · Note
• https://suse.com/security/cve/CVE-2015-4516 · Note