Description

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

Related CPE's

a

mozilla

firefox

Vulnerable

a

mozilla

firefox_esr

Vulnerable

a

mozilla

thunderbird

Vulnerable

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1677046

Issue TrackingVendor Advisory

https://www.mozilla.org/security/advisories/mfsa2021-10/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2021-11/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2021-12/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1677046

Issue TrackingVendor Advisory

https://www.mozilla.org/security/advisories/mfsa2021-10/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2021-11/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2021-12/

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-326

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.5 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-03-31T12:15:19.000Z

4 years ago

Last modified

2024-11-21T04:52:09.040Z

1 year ago