CVE-2014-1499
Fixed in a distro release EPSS 2%
Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.
Products: suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, mozilla seamonkey, oracle solaris, mozilla firefox, opensuse, opensuse_project opensuse
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 |