Download Firefox

Firefox is no longer supported on Windows 8.1 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox is no longer supported on macOS 10.14 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox Privacy Notice

Mozilla Foundation Security Advisory 2005-08

Synthetic middle-click event can steal clipboard contents

Announced
January 21, 2005
Reporter
Jesse Ruderman
Impact
Moderate
Products
Firefox, Mozilla Suite
Fixed in
  • Firefox 1
  • Mozilla Suite 1.7.5

Description

Script-generated middle-click events can steal clipboard contents on systems where that action is a paste. Middle-click paste is the default behavior on Unix systems, and a hidden option elsewhere.

Workaround

Disable javascript or upgrade to fixed version.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=265728