CVE-2014-1506

 

Published at: - 19-03-2014 11:55

Last modified: - 26-09-2022 05:45

Total changes: - 2

Description

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:N/A:P

 

Verification logic

 

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=944374
• http://www.mozilla.org/security/announce/2014/mfsa2014-24.html
• 20140326 Firefox for Android Profile Directory Derandomization and Data Exfiltration (CVE-2014-1484, CVE-2014-1506, CVE-2014-1515, CVE-2014-1516)-Third Party Advisory
• 66420-Third Party Advisory, VDB Entry
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

 

Keywords

NVD

 

CVE-2014-1506

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures