A vulnerability exists in WebRTC where malicious web content can use probing techniques on the getUserMedia API using constraints to reveal device properties of cameras on the system without triggering a user prompt or notification. This allows for the potential fingerprinting of users. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 27, 2019 |
| Centos_linux | — | Upgrade firefox-debuginfoUpgrade firefoxUpgrade firefox-debugsource | Sep 5, 2019 | Sep 4, 2019 |
| Debian | — | Upgrade firefox-esr | Jul 30, 2024 | Sep 27, 2019 |
| Freebsd | — | Upgrade libxulUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade waterfoxUpgrade thunderbirdUpgrade seamonkeyUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade firefox | Sep 4, 2019 | Sep 3, 2019 |
| Mfsa2019 25 | — | Upgrade to Mozilla Firefox version 69.0 | Sep 4, 2019 | Sep 3, 2019 |
| Mfsa2019 26 | — | Upgrade to Mozilla Firefox ESR version 68.1 | Sep 4, 2019 | Sep 3, 2019 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 68.12.0-11.4.27.0.1.82.0 on Solaris 11.4Upgrade web/browser/firefox to version 78.3.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Sep 27, 2019 |
| Oracle_linux | — | Upgrade firefox | Jul 21, 2020 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade firefoxNo solution existsUpgrade firefox-debuginfoUpgrade firefox-debugsource | Sep 5, 2019 | Sep 4, 2019 |
| Suse | — | Upgrade mozilla-nssUpgrade firefox-libgtk-3-0Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libharfbuzz0Upgrade firefox-libffi7Upgrade mozillafirefox-branding-sledUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-glib2-langUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nsprUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodule-ximUpgrade mozillafirefox-translations-commonUpgrade libsoftokn3Upgrade firefox-libcairo-gobject2Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-dataUpgrade firefox-gtk3-langUpgrade firefox-libffi4Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certsUpgrade mozilla-nss-toolsUpgrade mozillafirefox-branding-sleUpgrade firefox-atk-langUpgrade libfreebl3-32bitUpgrade firefox-glib2-toolsUpgrade libfirefox-gio-2_0-0Upgrade mozillafirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-32bitUpgrade mozillafirefox-branding-upstreamUpgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libcairo2Upgrade mozillafirefox-develUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade libfreebl3Upgrade mozilla-nss-develUpgrade mozilla-nss-certs-32bitUpgrade libfirefox-glib-2_0-0Upgrade mozillafirefoxUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-gmodule-2_0-0 | Oct 8, 2019 | Sep 3, 2019 |
| Ubuntu | — | Upgrade firefox | Sep 5, 2019 | Sep 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub