![Trend Micro Security](https://www.trendmicro.com/content/dam/trendmicro/global/en/global/logo/logo-desktop.png)
Mozilla Firefox File Action Dialog Refocus Vulnerability
2015年7月21日
危険度: : 中
CVE識別番号: CVE-2008-0591
概要
Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1001771
Trend Micro Deep Security DPI Rule Name: 1001771 - Mozilla Firefox File Action Dialog Refocus Vulnerability
影響を受けるソフトウェア
- Mozilla Firefox 2.0.0.11