CVE-2014-1499

MEDIUM · 4.3 CVSS Gepubliceerd: 19-03-2014

Beschrijving

Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

Vendors

Suse Mozilla Oracle Opensuse Opensuse Project

Affected products

Linux Enterprise Desktop Linux Enterprise Server Linux Enterprise Software Development Kit Seamonkey Solaris Firefox Opensuse

References

lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.mozilla.org
www.oracle.com
bugzilla.mozilla.org
security.gentoo.org