CVE-2014-1499 Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
| mozilla seamonkey | < 2.25 | 2.25 |
| oracle solaris | = 11.3 | No fix listed |
| mozilla Firefox | < 28.0 | 28.0 |
| opensuse | = 13.1 | No fix listed |
| opensuse project opensuse | = 11.4 | No fix listed |
| opensuse project opensuse | = 12.3 | No fix listed |
References
- SUSE-SU-2014:0418 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0419 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0448 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2014:0584 mailing-list third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- bugzilla.mozilla.org issue-tracking vendor-advisory
- GLSA-201504-01 third-party-advisory vendor-advisory