CVE-2015-0834

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0

Description The issue concerns the WebRTC subsystem in Mozilla Firefox, which recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS. This makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time window.

Recommendations For versions prior to 36.0, update to version 36.0 or later to resolve the issue.