Mozilla Foundation Security Advisory 2005-08
Synthetic middle-click event can steal clipboard contents
- Announced
- January 21, 2005
- Reporter
- Jesse Ruderman
- Impact
- Moderate
- Products
- Firefox, Mozilla Suite
- Fixed in
-
- Firefox 1
- Mozilla Suite 1.7.5
Description
Script-generated middle-click events can steal clipboard contents on systems where that action is a paste. Middle-click paste is the default behavior on Unix systems, and a hidden option elsewhere.
Workaround
Disable javascript or upgrade to fixed version.