CVE-2013-1698

2013-06-2500:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.004

Percentile

74.9%

JSON

The getUserMedia permission implementation in Mozilla Firefox before 22.0
references the URL of a top-level document instead of the URL of a specific
page, which makes it easier for remote attackers to trick users into
permitting camera or microphone access via a crafted web site that uses
IFRAME elements.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchfirefox< 22.0+build1-0ubuntu0.12.04.1UNKNOWN
ubuntu12.10noarchfirefox< 22.0+build1-0ubuntu0.12.10.1UNKNOWN
ubuntu13.04noarchfirefox< 22.0+build1-0ubuntu0.13.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	firefox	< 22.0+build1-0ubuntu0.12.04.1	UNKNOWN
ubuntu	12.10	noarch	firefox	< 22.0+build1-0ubuntu0.12.10.1	UNKNOWN
ubuntu	13.04	noarch	firefox	< 22.0+build1-0ubuntu0.13.04.1	UNKNOWN