CVE-2014-1539

Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.

Date published : 2014-06-11

http://www.securityfocus.com/bid/67967

http://www.mozilla.org/security/announce/2014/mfsa2014-50.html