Vulnerability identifier: #VU50888
Vulnerability risk: Low
Exploitation vector: Network
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output via a decoding error, when trying to load a cross-origin resource in an audio/video context. A remote attacker can gain access to information about the resource.
Install updates from vendor's website.
Vulnerable software versions
Mozilla Firefox: 6.0 - 85.0.2
Firefox ESR: 78.0 - 78.7.1, 68.0 - 68.12.0, 60.0 - 60.9.0
Fixed software versions
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?