{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Inconsistent video sharing within iframe (MFSA 2014-81)",
    "tracking": {
      "current_release_date": "2026-08-11T13:57:08+00:00",
      "generator": {
        "date": "2026-08-11T13:57:08+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.3.0"
        }
      },
      "id": "CVE-2014-1586",
      "initial_release_date": "2014-10-14T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-08-11T13:57:08+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 5.11",
            "product": {
              "name": "Red Hat Enterprise Linux 5.11",
              "product_id": "rhel-5.11.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox-debuginfo",
            "product": {
              "name": "firefox-debuginfo",
              "product_id": "firefox-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "firefox",
            "product": {
              "name": "firefox",
              "product_id": "firefox.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/firefox?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird"
              }
            }
          },
          {
            "category": "product_version",
            "name": "thunderbird",
            "product": {
              "name": "thunderbird",
              "product_id": "thunderbird.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/thunderbird?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox"
        },
        "product_reference": "firefox",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox-debuginfo"
        },
        "product_reference": "firefox-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:firefox.src"
        },
        "product_reference": "firefox.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird"
        },
        "product_reference": "thunderbird",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:thunderbird.src"
        },
        "product_reference": "thunderbird.src",
        "relates_to_product_reference": "rhel-6-els.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-1586",
      "discovery_date": "2014-10-14T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-7-els.els:firefox-debuginfo"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 does not consider whether WebRTC video sharing is occurring, which allows remote attackers to obtain sensitive information from the local camera in certain IFRAME situations by maintaining a session after the user temporarily navigates away.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-5.11.z.els:firefox.src",
          "rhel-5.11.z.els:thunderbird.src",
          "rhel-6-els.els:firefox",
          "rhel-6-els.els:firefox.src",
          "rhel-6-els.els:thunderbird",
          "rhel-6-els.els:thunderbird.src",
          "rhel-7-els.els:firefox",
          "rhel-7-els.els:firefox.src"
        ],
        "known_not_affected": [
          "rhel-7-els.els:firefox-debuginfo"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1586"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1586"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1586"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "details": "Affected",
          "product_ids": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore": 4.3
          },
          "products": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-5.11.z.els:firefox.src",
            "rhel-5.11.z.els:thunderbird.src",
            "rhel-6-els.els:firefox",
            "rhel-6-els.els:firefox.src",
            "rhel-6-els.els:thunderbird",
            "rhel-6-els.els:thunderbird.src",
            "rhel-7-els.els:firefox",
            "rhel-7-els.els:firefox-debuginfo",
            "rhel-7-els.els:firefox.src"
          ]
        }
      ],
      "title": "Inconsistent video sharing within iframe (MFSA 2014-81)"
    }
  ]
}