PT-2016-1442 · Mozilla+2 · Firefox+2
Q1
·
Publicado
2016-03-08
·
Atualizado
2024-06-15
·
CVE-2016-1975
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 45.0
Description
The issue is related to multiple race conditions in the WebRTC implementation, specifically in the dom/media/systemservices/CamerasChild.cpp file. These race conditions might allow remote attackers to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. The exact vectors for exploitation are unknown.
Recommendations
For versions prior to 45.0, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider disabling the WebRTC implementation until a patch is available. Restrict access to the CamerasChild.cpp functionality to minimize the risk of exploitation. Avoid using the affected WebRTC features in Mozilla Firefox until the issue is resolved.
Correção
DoS
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Suse