CVE-2014-1585 | BDVDB-2026-64867 Detail
Description#
The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not properly recognize Stop Sharing actions for videos in IFRAME elements, which allows remote attackers to obtain sensitive information from the local camera by maintaining a session after the user tries to discontinue streaming.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/62021
- http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1062876
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-81.html
- http://www.securitytracker.com/id/1031028
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
- http://www.ubuntu.com/usn/USN-2373-1
- https://security.gentoo.org/glsa/201504-01
- http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
- http://secunia.com/advisories/61387
- http://www.ubuntu.com/usn/USN-2372-1
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Show all 23
- http://secunia.com/advisories/62022
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
- http://www.securitytracker.com/id/1031030
- http://secunia.com/advisories/62023
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
- http://www.securityfocus.com/bid/70425
- http://www.debian.org/security/2014/dsa-3050
- http://www.debian.org/security/2014/dsa-3061
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.