UBUNTU-CVE-2023-29533

Dashboard / Vulnerabilities / UBUNTU-CVE-2023-29533

UBUNTU-CVE-2023-29533

Summary:

Details: A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

References: https://ubuntu.com/security/CVE-2023-29533, https://www.mozilla.org/en-US/security/advisories/mfsa2023-13/#CVE-2023-29533, https://www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-29533, https://www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-29533, https://ubuntu.com/security/notices/USN-6010-1, https://ubuntu.com/security/notices/USN-6015-1, https://www.cve.org/CVERecord?id=CVE-2023-29533