Published: 26/06/2013 Updated: 19/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The getUserMedia permission implementation in Mozilla Firefox prior to 22.0 references the URL of a top-level document instead of the URL of a specific page, which makes it easier for remote malicious users to trick users into permitting camera or microphone access via a crafted web site that uses IFRAME elements.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox 19.0
mozilla firefox 19.0.1
mozilla firefox 19.0.2
mozilla firefox 20.0
mozilla firefox 20.0.1
mozilla firefox

USN-1890-1 introduced a regression in Firefox ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Mozilla Foundation Security Advisory 2013-60 getUserMedia permission dialog incorrectly displays location Announced June 25, 2013 Reporter Matt Wobensmith Impact Moderate Products Firefox Fixed in ...

The getUserMedia permission implementation in Mozilla Firefox before 220 references the URL of a top-level document instead of the URL of a specific page, which makes it easier for remote attackers to trick users into permitting camera or microphone access via a crafted web site that uses IFRAME elements ...

CWE-264 https://bugzilla.mozilla.org/show_bug.cgi?id=876044 http://www.mozilla.org/security/announce/2013/mfsa2013-60.html http://www.ubuntu.com/usn/USN-1890-1 http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00005.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16791 https://nvd.nist.gov https://usn.ubuntu.com/1890-2/https://access.redhat.com/security/cve/cve-2013-1698

CVE-2013-1698

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect