Логотип exploitDog
bind:CVE-2018-12391
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-12391

Количество 8

Количество 8

ubuntu логотип

CVE-2018-12391

почти 7 лет назад

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2018-12391

больше 7 лет назад

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2018-12391

почти 7 лет назад

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2018-12391

почти 7 лет назад

During HTTP Live Stream playback on Firefox for Android, audio data ca ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-77j4-f249-58h4

больше 3 лет назад

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
EPSS: Низкий
fstec логотип

BDU:2019-03472

больше 7 лет назад

Уязвимость реализации протокола HTTP Live Streaming браузеров Firefox и Firefox ESR и почтового клиента Thunderbird для Android, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 8.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2018:3646-1

больше 7 лет назад

Security update for MozillaThunderbird

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2018:3769-1

около 7 лет назад

Security update for MozillaThunderbird

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2018-12391

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
1%
Низкий
почти 7 лет назад
redhat логотип
CVE-2018-12391

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
1%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-12391

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
1%
Низкий
почти 7 лет назад
debian логотип
CVE-2018-12391

During HTTP Live Stream playback on Firefox for Android, audio data ca ...

CVSS3: 8.8
1%
Низкий
почти 7 лет назад
github логотип
GHSA-77j4-f249-58h4

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад
fstec логотип
BDU:2019-03472

Уязвимость реализации протокола HTTP Live Streaming браузеров Firefox и Firefox ESR и почтового клиента Thunderbird для Android, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 8.8
1%
Низкий
больше 7 лет назад
suse-cvrf логотип
openSUSE-SU-2018:3646-1

Security update for MozillaThunderbird

больше 7 лет назад
suse-cvrf логотип
SUSE-SU-2018:3769-1

Security update for MozillaThunderbird

около 7 лет назад

Уязвимостей на страницу