Note:
This project will be discontinued after December 13, 2021. [more]
2020-08-10
When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
| Products | Ubuntu_linux, Firefox, Firefox_esr, Thunderbird |
| Type | Loop with Unreachable Exit Condition ('Infinite Loop') (CWE-835) |
| First patch | - None (likely due to unavailable code) |
| Links |
• https://usn.ubuntu.com/4443-1/
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html • https://bugzilla.mozilla.org/show_bug.cgi?id=1648333 • https://www.mozilla.org/security/advisories/mfsa2020-32/ • https://www.mozilla.org/security/advisories/mfsa2020-33/ |