CVE-2014-1499

CVE-2014-1499 describes a domain spoofing vulnerability in Mozilla Firefox before version 28.0 and SeaMonkey before 2.25, affecting the WebRTC camera and microphone permission prompts. An attacker could exploit this by timing navigation during prompt generation to display a false domain. Rated with a CVSS score of 4.3 (Medium), this vulnerability has a network attack vector and medium attack complexity, potentially leading to information disclosure (privacy concerns) but not impacting confidentiality, integrity, or availability of the system itself. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.