Path Traversal in Mozilla Firefoxos
CVE-2014-1507
Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile object.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.011 (62.4th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Firefoxos
- Oracle Solaris — versions 11.3
- N/a — versions n/a
Weakness classification (CWE)
References
- security@mozilla.org (x_refsource_CONFIRM, Third Party Advisory)
- security@mozilla.org (x_refsource_CONFIRM, Issue Tracking)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)