CVE-2020-6812 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	Yes
Type	Information disclosure
Description	An information disclosure issue has been found in Firefox before 74 and Thunderbird before 68.6. The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1115	thunderbird	68.5.0-1	68.6.0-1	Critical	Fixed
AVG-1112	firefox	73.0.1-1	74.0-1	Critical	Fixed

Date	Advisory	Group	Package	Severity	Type
11 Mar 2020	ASA-202003-8	AVG-1112	firefox	Critical	multiple issues
16 Mar 2020	ASA-202003-11	AVG-1115	thunderbird	Critical	multiple issues

References
https://www.mozilla.org/en-US/security/advisories/mfsa2020-08/#CVE-2020-6812 https://www.mozilla.org/en-US/security/advisories/mfsa2020-10/#CVE-2020-6812 https://bugzilla.mozilla.org/show_bug.cgi?id=1616661

References

https://www.mozilla.org/en-US/security/advisories/mfsa2020-08/#CVE-2020-6812
https://www.mozilla.org/en-US/security/advisories/mfsa2020-10/#CVE-2020-6812
https://bugzilla.mozilla.org/show_bug.cgi?id=1616661