CVE-2008-3837

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 2.0.0.17 Mozilla Firefox 3.x versions prior to 3.0.2 SeaMonkey versions prior to 1.1.12

Description The issue allows user-assisted remote attackers to move a window during a mouse click, and possibly force a file download or unspecified other drag-and-drop action, via a crafted onmousedown action that calls window.moveBy. This can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.

Recommendations For Mozilla Firefox versions prior to 2.0.0.17, update to version 2.0.0.17 or later. For Mozilla Firefox 3.x versions prior to 3.0.2, update to version 3.0.2 or later. For SeaMonkey versions prior to 1.1.12, update to version 1.1.12 or later.