An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the prompt can display the wrong origin, leading to user confusion about which site is making the request to capture an audio stream. This vulnerability affects Firefox < 58.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/102786 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1040270 | Third Party Advisory VDB Entry |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1405599 | Issue Tracking Permissions Required |
| https://usn.ubuntu.com/3544-1/ | Third Party Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-02/ | Vendor Advisory |
| http://www.securityfocus.com/bid/102786 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1040270 | Third Party Advisory VDB Entry |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1405599 | Issue Tracking Permissions Required |
| https://usn.ubuntu.com/3544-1/ | Third Party Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-02/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 04:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/102786 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1040270 - Third Party Advisory, VDB Entry | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1405599 - Issue Tracking, Permissions Required | |
| References | () https://usn.ubuntu.com/3544-1/ - Third Party Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2018-02/ - Vendor Advisory |
Information
Published : 2018-06-11 21:29
Updated : 2024-11-21 04:08
NVD link : CVE-2018-5109
Mitre link : CVE-2018-5109
CVE.ORG link : CVE-2018-5109
JSON object : View
Products Affected
canonical
- ubuntu_linux
mozilla
- firefox
CWE
CWE-346
Origin Validation Error