PT-2019-5157 · Mozilla+5 · Firefox+5
Andreas Pehrson
·
Publicado
2019-09-03
·
Atualizado
2024-12-12
·
CVE-2019-11749
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 69
Firefox ESR versions prior to 68.1
Description
The issue is related to a lack of protection for service data. It may allow a remote attacker to gain unauthorized access to information. Additionally, there is a problem with WebRTC where malicious web content can use probing techniques on the
getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification, potentially allowing for user fingerprinting.Recommendations
For Firefox versions prior to 69, update to version 69 or later.
For Firefox ESR versions prior to 68.1, update to version 68.1 or later.
As a temporary workaround, consider disabling the
getUserMedia API until a patch is available.Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Firefox
Red Hat
Suse
Ubuntu