NVD

Id
30209  
Name
CVE-2014-1586  
Description
content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-10-15  
Modified Date
2016-12-23  
Seq
2014-1586  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
159905 30209 CVE-2014-1586 FEDORA-2014-14084  View
159906 30209 CVE-2014-1586 FEDORA-2014-13042  View
159907 30209 CVE-2014-1586 openSUSE-SU-2015:0138  View
159908 30209 CVE-2014-1586 openSUSE-SU-2015:1266  View
159909 30209 CVE-2014-1586 openSUSE-SU-2014:1343  View
159910 30209 CVE-2014-1586 openSUSE-SU-2014:1344  View
159911 30209 CVE-2014-1586 openSUSE-SU-2014:1345  View
159912 30209 CVE-2014-1586 openSUSE-SU-2014:1346  View
159913 30209 CVE-2014-1586 DSA-3050  View
159914 30209 CVE-2014-1586 DSA-3061  View
159915 30209 CVE-2014-1586 http://www.mozilla.org/security/announce/2014/mfsa2014-81.html  View
159916 30209 CVE-2014-1586 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
159917 30209 CVE-2014-1586 70427  View
159918 30209 CVE-2014-1586 1031028  View
159919 30209 CVE-2014-1586 1031030  View
159920 30209 CVE-2014-1586 USN-2372-1  View
159921 30209 CVE-2014-1586 USN-2373-1  View
159922 30209 CVE-2014-1586 https://bugzilla.mozilla.org/show_bug.cgi?id=1062981  View
159923 30209 CVE-2014-1586 GLSA-201504-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16023 JVNDB-2014-004898 Mozilla Firefox の content/base/src/nsDocument.cpp におけるローカルカメラから重要な情報を取得される脆弱性 Mozilla Firefox の content/base/src/nsDocument.cpp は、WebRTC によるビデオ共有が発生しているかどうかを考慮しないため、IFRAME の特定の状況におけるローカルカメラから重要な情報を取得される脆弱性が存在します。 CVE-2014-1586 68873 CVE-2014-1586 30209 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004898.html 2014-10-14 2014-10-22 View