WaveThrough Browser Audio Vulnerability

A vulnerability has been discovered in the way that Edge and Firefox internet browsers handle audio content.

Threat ID:: CC-2507
Category:
Threat Severity:: Low
Threat Vector:
Published:: 21 June 2018 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

This content has been archived

This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk

Summary

A vulnerability has been discovered in the way that Edge and Firefox internet browsers handle audio content.

Affected platforms

The following platforms are known to be affected:

Microsoft Edge

Microsoft Edge - All versions
Mozilla Firefox Nightly - All versions

Threat details

A remote attacker could exploit this to access data from other sites open in the browser.

When a website requests multimedia content within an <audio> tag using service workers, it can also specify a 'range' parameter to define a certain part of the content it wants returned. Resuming a download or scrubbing to a specific part of video or audio trackboth require use of the 'range' parameter.

Inconsistencies in the way browsers treat files loaded this way make it possible for a malicious site to load any content within the <audio> tag. Under most circumstances this content would be blocked by Cross-origin Resource Sharing (CORS), as browser security feature designed to prevent sites accessing other site data. However, the malicious site can issue a 'no-cors' request that the receiving site will honour regardless.

For further information:

Remediation steps

Type	Step
	Microsoft have addressed this vulnerability in an update to Edge. Mozilla have confirmed the latest version of Firefox Nightly is no longer vulnerable. Users are advised to update their affected systems immediately.

CVE Vulnerabilities

Status

CVE-2018-8235

Last edited: 17 February 2020 12:57 pm