NetSight
IP …
medium5.8

CVE-2010-1125

The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected…

Impact

The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.

Affected products

VendorProductAffected versions
MozillaFirefox
Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5
MozillaSeamonkey
through 2.0.4
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-200

References