VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 11, 2014· Updated Jun 17, 2026

CVE-2014-1539

CVE-2014-1539

Description

Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • osv-coords2 versions
    pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed
    < 128.5.1-1.1+ 1 more
    • (no CPE)range: < 128.5.1-1.1
    • (no CPE)range: < 50.1.0-1.1
  • Mozilla Corporation/Firefox2 versions
    cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=29.0.1
    • (no CPE)range: <30.0
  • Mozilla Corporation/Thunderbird10 versions
    cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*range: <=24.6
    • cpe:2.3:a:mozilla:thunderbird:24.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:24.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:24.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:24.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:24.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:24.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:24.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:thunderbird:24.5:*:*:*:*:*:*:*
    • (no CPE)range: <=24.6

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.