Mozilla Firefox Nightly for MAC OS X - invisible cursor using flash object and fullscreen mode.

When you click on a button into the flash object for go in fullscreen and click on another button on the flash object in fullscreen for go out of the fullscreen mode, the cursor becomes totally invisible.

Steps :
1 - Click on the flash object for play the movie.
2 - When the movie start , click on the button into the flash object for go on the fullscreen mode.
3 - Into the flash object in fullscreen mode , click on the button for go out of the fullscreen mode ( if you press ESC , the bug can't work , so it is important to don't press ESC but only click on the button into the flash object which allows to quit the fullscreen mode ).
4 - Move the cursor into the webpage and wait some seconds.

Result : The cursor is now totally invisible.


This vulnerability can be used for a ClickJacking/CursorJacking attack or others vulnerabilities like various types of Spoofing...).