Lucene search
Mozilla FoundationMFSA2013-60HistoryJun 25, 2013 - 12:00 a.m.
getUserMedia permission dialog incorrectly displays location — Mozilla
2013-06-2500:00:00
Mozilla Foundation
www.mozilla.org
38
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.004
Percentile
74.9%
Mozilla engineer Matt Wobensmith discovered that when the getUserMedia permission dialog for an iframe appears in one domain, it will display its origin as that of the top-level document and not the calling framed page. This could lead to users incorrectly giving camera or microphone permissions when confusing the requesting page’s location for a hosting one’s.
Affected configurations
Node
mozillafirefoxRange<22
Related
cve
cve
CVE-2013-1698
2013-06-26 03:19:10
ubuntucve
ubuntucve
CVE-2013-1698
2013-06-25 00:00:00
prion
prion
Code injection
2013-06-26 03:19:00
cvelist
cvelist
CVE-2013-1698
2013-06-26 01:00:00
nvd
nvd
CVE-2013-1698
2013-06-26 03:19:10
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2013-60) - Linux
2021-11-11 00:00:00
openSUSE: Security Advisory for update (openSUSE-SU-2013:1176-1)
2013-11-19 00:00:00
SuSE Update for update openSUSE-SU-2013:1176-1 (update)
2013-11-19 00:00:00
suse
suse
update to SeaMonkey 2.19 (important)
2013-07-11 06:04:11
MozillaFirefox: Update to Firefox 22.0 release (important)
2013-07-04 12:04:29
ubuntu
ubuntu
Firefox vulnerabilities
2013-06-26 00:00:00
Firefox regression
2013-07-03 00:00:00
nessus
nessus
Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1890-1)
2013-06-27 00:00:00
Firefox < 22.0 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
Thunderbird < 17.0.7 Multiple Vulnerabilities (Mac OS X)
2013-06-26 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2013-06-25 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2013-07-01 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.004
Percentile
74.9%
Related for MFSA2013-60