Mozilla

Mozilla

Mozilla Foundation Security Advisory 2005-08

Synthetic middle-click event can steal clipboard contents

Announced
January 21, 2005
Reporter
Jesse Ruderman
Impact
Moderate
Products
Firefox, Mozilla Suite
Fixed in
  • Firefox 1
  • Mozilla Suite 1.7.5

Description

Script-generated middle-click events can steal clipboard contents on systems where that action is a paste. Middle-click paste is the default behavior on Unix systems, and a hidden option elsewhere.

Workaround

Disable javascript or upgrade to fixed version.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=265728