CVE-2024-6608

Name

CVE-2024-6608

Description

It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox window. This vulnerability affects Firefox < 128 and Thunderbird < 128.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
	https://bugzilla.mozilla.org/show_bug.cgi?id=1743329
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

CPE URI	Source package	Min version	Max version
	firefox	>= unspecified	< 128
	thunderbird	>= unspecified	< 128

References

Match rules

Vulnerable and fixed packages