<em style='font-weight:bold;'>(Description Provided by <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2011-3663" target="_blank">CVE</a>)</em> : Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaMonkey before 2.6 allow remote attackers to capture keystrokes entered on a web page, even when JavaScript is disabled, by using SVG animation accessKey events within that web page.

Upgrade to Firefox and Thunderbird to version 9.0 or higher, and SeaMonkey to version 2.6 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1026445 1026446 1026447
• OVAL ID: 14739
• CVE ID: 2011-3663 (see also: NVD)
• Secunia Advisory ID: 47302 47334 47460 47504 47761 47958 49055 51766
• ISS X-Force ID: 71911
• Related OSVDB ID: 77951 77952 77953 77955 77956
• Mail List Post: http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html
  http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html
• Vendor Specific News/Changelog Entry: http://lists.opensuse.org/opensuse-updates/2012-02/msg00010.html
  http://lists.opensuse.org/opensuse-updates/2012-04/msg00066.html
  http://www.gentoo.org/security/en/glsa/glsa-201301-01.xml
  http://www.mozilla.org/security/announce/2011/mfsa2011-56.html
  http://www.ubuntu.com/usn/usn-1306-1/
  http://www.ubuntu.com/usn/usn-1306-2/
  http://www.ubuntu.com/usn/usn-1343-1
  https://bugzilla.mozilla.org/show_bug.cgi?id=704482 [ Auth Req'd ]
  https://hermes.opensuse.org/messages/13154636
  https://hermes.opensuse.org/messages/13155295
• Other Advisory URL: http://www.mandriva.com/security/advisories?name=MDVSA-2011:192

Unknown or Incomplete