Dear mainteners,

Iceweasel allow opening characters devices owned by the who run
Iceweasel. After opening a characters devices and iceweasel can print
strings from them. For exemple, this issue can be used localy to get
parcial terminal keyboard tape from '/dev/pts/*' characters devices.


Description of bug  :
---------------------
Opening a terminal with a terminal emulators on a graphical session
create a character device named pseudoterminal slave. This device is
created as a number on /dev/pts directory and it is owned by users who
have opened the terminal window. Iceweasel is able to open this kind of
device and print some keyboard tape form a pseudoterminal slave device.


The bug exploitation :
----------------------

- Open the url : file:///dev/pts/<id> : You will see the terminal
identified by the <id> become slower and iceweasel loadind the url.
- Tape some text on slowed terminal (it will take some time to print
the taped carracters on the emulated terminal).
- Kill the emulator terminal window to let iceweasel print the
informations leaked from the character device.


Best regards and thank you.

Florian

src:iceweasel has been superseded by src:firefox-esr in version
45.0esr-1 in March 2016. Transitional packages to ease upgrades were
provided in the wheezy, jessie, stretch and buster releases. The
transitional packages have been removed finally before the bullseye
release in August 2021.
After regular security support for buster ended in August 2022 and LTS
support ended in June 2024, I'm closing the remaining bug reports now.

Andreas