CVE-2020-15654 log
| Source |
|
| Severity | Low |
| Remote | Yes |
| Type | Denial of service |
| Description | When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1214 | thunderbird | 68.11.0-1 | 68.12.0-1 | High | Fixed | |
| AVG-1213 | firefox | 78.0.2-1 | 79.0-1 | High | Fixed |
| References |
|---|
https://www.mozilla.org/en-US/security/advisories/mfsa2020-33/#CVE-2020-15654 |