Published: 15/10/2014 Updated: 24/12/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox prior to 33.0, Firefox ESR 31.x prior to 31.2, and Thunderbird 31.x prior to 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote malicious users to obtain sensitive information from the local camera by maintaining a session after the user tries to discontinue streaming.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird 31.1.0
mozilla thunderbird 31.0
mozilla firefox esr 31.1.0
mozilla firefox esr 31.0
mozilla firefox 30.0
mozilla firefox 31.1.0
mozilla firefox 31.0
mozilla firefox

Several security issues were fixed in Thunderbird ...

Firefox could be made to crash or run programs as your login if it opened a malicious website ...

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service This update updates Icedove to the ESR31 series of Thunderbird In a ...

Mozilla Foundation Security Advisory 2014-81 Inconsistent video sharing within iframe Announced October 14, 2014 Reporter Eric Shepherd, Jan-Ivar Bruaroey Impact Moderate Products Firefox, Firefox ESR, SeaMonkey, Thunderbird ...

The WebRTC video-sharing feature in dom/media/MediaManagercpp in Mozilla Firefox before 330, Firefox ESR 31x before 312, and Thunderbird 31x before 312 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive information from the local camera by maintaining a session aft ...

NVD-CWE-noinfo https://bugzilla.mozilla.org/show_bug.cgi?id=1062876 http://www.mozilla.org/security/announce/2014/mfsa2014-81.html http://www.ubuntu.com/usn/USN-2372-1 http://www.ubuntu.com/usn/USN-2373-1 http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html http://www.debian.org/security/2014/dsa-3061 http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html http://www.debian.org/security/2014/dsa-3050 http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html http://www.securitytracker.com/id/1031030 http://secunia.com/advisories/62023 http://www.securityfocus.com/bid/70425 http://secunia.com/advisories/61387 http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html http://secunia.com/advisories/62022 http://www.securitytracker.com/id/1031028 http://secunia.com/advisories/62021 http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html https://security.gentoo.org/glsa/201504-01 http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html https://nvd.nist.gov https://usn.ubuntu.com/2373-1/https://access.redhat.com/security/cve/cve-2014-1585

CVE-2014-1585

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect