CVE-2014-1499

published 2014-03-19

CVE-2014-1499: Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
mozilla	firefox	< 28.0	28.0
mozilla	seamonkey	< 2.25	2.25
opensuse	opensuse	—	—
opensuse_project	opensuse	—	—
opensuse_project	opensuse	—	—
oracle	solaris	—	—
suse	linux_enterprise_desktop	—	—
suse	linux_enterprise_server	—	—
suse	linux_enterprise_software_development_kit	—	—