CVE-2014-1515

 

Published at: - 25-03-2014 02:25

Last modified: - 26-09-2022 05:45

Total changes: - 2

Description

Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:M/Au:N/C:P/I:N/A:N

 

Verification logic

 

Reference

• https://www.mozilla.org/security/announce/2014/mfsa2014-33.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=945429
• 20140326 Firefox for Android Profile Directory Derandomization and Data Exfiltration (CVE-2014-1484, CVE-2014-1506, CVE-2014-1515, CVE-2014-1516)-

 

Keywords

NVD

 

CVE-2014-1515

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures