CVE-2014-1586: Medium severity firefox vulnerability
content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1586?
CVE-2014-1586 is classified as a moderate severity vulnerability that can lead to information disclosure.
How do I fix CVE-2014-1586?
To fix CVE-2014-1586, update to Mozilla Firefox version 33.0 or later, or Thunderbird version 31.2 or later.
What versions of software are affected by CVE-2014-1586?
CVE-2014-1586 affects Mozilla Firefox versions before 33.0, Firefox ESR versions before 31.2, and Thunderbird versions before 31.2.
What type of vulnerability is CVE-2014-1586 categorized as?
CVE-2014-1586 is categorized as an information disclosure vulnerability specifically related to WebRTC video sharing.
Can CVE-2014-1586 be exploited remotely?
Yes, CVE-2014-1586 can be exploited remotely by attackers to obtain sensitive information from the local camera.