CVE-2018-5110 Other in Firefox
A UI rendering flaw in Firefox on OS X causes the cursor to become temporarily invisible when toggled via script, potentially confusing users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-5110?
CVE-2018-5110 is a medium-severity vulnerability in Mozilla Firefox, published on 11 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible within Firefox. Note: This vulnerability only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 58.
Weakness: CWE-20
Which versions are affected by CVE-2018-5110?
It affects 1 product.
Products include Mozilla Firefox.
How do I fix CVE-2018-5110?
Upgrade to a fixed version.
Is CVE-2018-5110 being exploited?
There is no known exploitation of CVE-2018-5110 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-q5wx-5wj5-v2g9.