4.3

CVE-2014-1499

Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

Data is provided by the National Vulnerability Database (NVD)
SuseLinux Enterprise Desktop Version11 Updatesp3
SuseLinux Enterprise Server Version11 Updatesp3
SuseLinux Enterprise Server Version11 Updatesp3 SwPlatformvmware
MozillaSeamonkey Version < 2.25
OracleSolaris Version11.3
MozillaFirefox Version < 28.0
OpensuseOpensuse Version13.1
Opensuse ProjectOpensuse Version11.4
Opensuse ProjectOpensuse Version12.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.61% 0.673
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N