Mozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a crafted web site that rapidly triggers permission requests, as demonstrated by the microphone permission or the geolocation permission.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "47.0+build3-0ubuntu0.14.04.1",
"binary_name": "firefox"
},
{
"binary_version": "47.0+build3-0ubuntu0.14.04.1",
"binary_name": "firefox-dev"
},
{
"binary_version": "47.0+build3-0ubuntu0.14.04.1",
"binary_name": "firefox-globalmenu"
},
{
"binary_version": "47.0+build3-0ubuntu0.14.04.1",
"binary_name": "firefox-mozsymbols"
},
{
"binary_version": "47.0+build3-0ubuntu0.14.04.1",
"binary_name": "firefox-testsuite"
}
]
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "47.0+build3-0ubuntu0.16.04.1",
"binary_name": "firefox"
},
{
"binary_version": "47.0+build3-0ubuntu0.16.04.1",
"binary_name": "firefox-dev"
},
{
"binary_version": "47.0+build3-0ubuntu0.16.04.1",
"binary_name": "firefox-globalmenu"
},
{
"binary_version": "47.0+build3-0ubuntu0.16.04.1",
"binary_name": "firefox-mozsymbols"
},
{
"binary_version": "47.0+build3-0ubuntu0.16.04.1",
"binary_name": "firefox-testsuite"
}
]
}