CVE-2019-11749

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 69 Firefox ESR versions prior to 68.1

Description The issue is related to a lack of protection for service data. It may allow a remote attacker to gain unauthorized access to information. Additionally, there is a problem with WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification, potentially allowing for user fingerprinting.

Recommendations For Firefox versions prior to 69, update to version 69 or later. For Firefox ESR versions prior to 68.1, update to version 68.1 or later. As a temporary workaround, consider disabling the getUserMedia API until a patch is available.