[tbb-bugs] #13543 [Tor Browser]: HTML5 media support may lead to OS fingerprinting

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Apr 5 09:35:02 UTC 2015


#13543: HTML5 media support may lead to OS fingerprinting
-----------------------------+-----------------------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-fingerprinting-os
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------------------------

Comment (by cypherpunks):

 https://www.mozilla.org/en-US/security/advisories/mfsa2015-31/
 > Security researcher Aki Helin reported a use-after-free when playing
 certain MP3 format audio files on the web using the Fluendo MP3 plugin for
 GStreamer on Linux. This is due to a flaw in handling certain MP3 files by
 the plugin and its interaction with Mozilla code. This can lead to a
 potentially exploitable crash.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13543#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list