CVE-2014-1499

Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering navigation at a certain time during generation of this prompt.

• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.htmlMailing List, Third Party Advisory
• http://www.mozilla.org/security/announce/2014/mfsa2014-19.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=961512Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201504-01Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.htmlMailing List, Third Party Advisory
• http://www.mozilla.org/security/announce/2014/mfsa2014-19.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=961512Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201504-01Third Party Advisory

Published

Mar 19, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-1492The cert_TestHostName function in lib/certdb/certdb.c in the…
• CVE-2014-1493Multiple unspecified vulnerabilities in the browser engine i…9.8
• CVE-2014-1494Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2014-1496Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, T…5.5
• CVE-2014-1497The mozilla::WaveReader::DecodeAudioData function in Mozilla…8.8
• CVE-2014-1498The crypto.generateCRMFRequest method in Mozilla Firefox bef…
• CVE-2014-1500Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow …
• CVE-2014-1501Mozilla Firefox before 28.0 on Android allows remote attacke…
• CVE-2014-1502The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedT…
• CVE-2014-1504The session-restore feature in Mozilla Firefox before 28.0 a…
• CVE-2014-1505The SVG filter implementation in Mozilla Firefox before 28.0…7.5
• CVE-2014-1506Directory traversal vulnerability in Android Crash Reporter …