PT-2016-2197 · Mozilla+3 · Firefox+3
Tim Mccormack
·
Publicado
2016-06-07
·
Atualizado
2024-12-12
·
CVE-2016-2829
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 47.0
Description
The issue is related to insufficient access control in the browser, which can be exploited by a remote attacker using a specially crafted website. This exploitation can allow the attacker to affect the integrity of information by making requests to access the microphone or geolocation feature. The vulnerability can be triggered by a website that rapidly initiates permission requests, such as those for microphone or geolocation access.
Recommendations
For versions prior to 47.0, update to version 47.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the microphone and geolocation features when using untrusted websites. Avoid using the
microphone and geolocation permissions in affected API endpoints until the issue is resolved.Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Suse
Ubuntu