PT-2016-1442

CVE-2016-1975

·

Published

2016-03-08

·

Updated

2024-06-15

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 45.0
Description The issue is related to multiple race conditions in the WebRTC implementation, specifically in the dom/media/systemservices/CamerasChild.cpp file. These race conditions might allow remote attackers to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. The exact vectors for exploitation are unknown.
Recommendations For versions prior to 45.0, update to version 45.0 or later to resolve the issue. As a temporary workaround, consider disabling the WebRTC implementation until a patch is available. Restrict access to the CamerasChild.cpp functionality to minimize the risk of exploitation. Avoid using the affected WebRTC features in Mozilla Firefox until the issue is resolved.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2016-1277
ALT-PU-2016-1454
OPENSUSE-SU-2016_0731-1
OPENSUSE-SU-2016_0733-1
OPENSUSE-SU-2024:10071-1
Found an issue in the description? Have something to add? Feel free to write us 👾