PT-2016-1442
CVE-2016-1975
·
Published
2016-03-08
·
Updated
2024-06-15
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 45.0
Description
The issue is related to multiple race conditions in the WebRTC implementation, specifically in the dom/media/systemservices/CamerasChild.cpp file. These race conditions might allow remote attackers to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. The exact vectors for exploitation are unknown.
Recommendations
For versions prior to 45.0, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider disabling the WebRTC implementation until a patch is available. Restrict access to the CamerasChild.cpp functionality to minimize the risk of exploitation. Avoid using the affected WebRTC features in Mozilla Firefox until the issue is resolved.
Found an issue in the description? Have something to add? Feel free to write us 👾