Уязвимость раскрытия информации об источнике в аудио/видеоконтексте в Mozilla Firefox и Thunderbird
Описание
При загрузке междоменного ресурса в аудио или видеоконтексте возникает ошибка декодирования, которая способна раскрывать информацию об этом ресурсе.
Затронутые версии ПО
- Firefox версии ниже 86
- Thunderbird версии ниже 78.8
- Firefox ESR версии ниже 78.8
Тип уязвимости
Раскрытие информации
Ссылки
- Issue TrackingPermissions RequiredVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Issue TrackingPermissions RequiredVendor Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
When trying to load a cross-origin resource in an audio/video context ...
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
EPSS
6.5 Medium
CVSS3
4.3 Medium
CVSS2