Vulnerability in Google Android
CVE-2014-1566
Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1515.
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
Affected products
- Google Android
- Mozilla Firefox — versions 30.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@mozilla.org (vdb-entry, x_refsource_BID)
- security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)
- security@mozilla.org (vendor-advisory, x_refsource_GENTOO)
- security@mozilla.org (x_refsource_CONFIRM)
- security@mozilla.org (vdb-entry, x_refsource_SECTRACK)
- security@mozilla.org (x_refsource_CONFIRM)