CVE-2014-1499

Summary

Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.mozilla.org/security/announce/2014/mfsa2014-19.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=961512
• https://security.gentoo.org/glsa/201504-01
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html

References

• http://www.mozilla.org/security/announce/2014/mfsa2014-19.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=961512
• https://security.gentoo.org/glsa/201504-01
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html

• ←Previous
• Next→