CVE-2014-1586

content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC…

published October 15, 2014

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02847 · 86.5th percentile
Published
2014-10-15T10:00Z
EPSS history
Timeline
  • 15 OCT 10:00Z
    content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC…
    cvelistv5