CVE-2011-3663

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 8.0 Thunderbird versions 5.0 through 8.0 SeaMonkey versions prior to 2.6

Description The issue allows remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page.

Recommendations For Mozilla Firefox versions 4.x through 8.0, update to a version outside of this range to resolve the issue. For Thunderbird versions 5.0 through 8.0, update to a version outside of this range to resolve the issue. For SeaMonkey versions prior to 2.6, update to version 2.6 or later to resolve the issue.