CVE-2019-11695 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	Yes
Type	Content spoofing
Description	In Firefox before 67.0, a custom cursor defined by scripting on a site can position itself over the addressbar to spoof the actual cursor when it should not be allowed outside of the primary web content area. This could be used by a malicious site to trick users into clicking on permission prompts, doorhanger notifications, or other buttons inadvertently if the location is spoofed over the user interface.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-966	firefox	66.0.5-1	67.0-1	Critical	Fixed

Date	Advisory	Group	Package	Severity	Type
23 May 2019	ASA-201905-9	AVG-966	firefox	Critical	multiple issues

References
https://www.mozilla.org/en-US/security/advisories/mfsa2019-13/#CVE-2019-11695 https://bugzilla.mozilla.org/show_bug.cgi?id=1445844