CVE-2009-0253

Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2009-01-22

Last modified

2024-08-07

Affected products

• Firefox (Mozilla)

References

• http://securityreason.com/securityalert/4936
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48212
• https://www.exploit-db.com/exploits/7842