Information disclosure in Google Android

CVE-2015-7190

The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application.

Vulnerability class: Information Disclosure

EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.

Affected products

Google Android
Mozilla Firefox
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@mozilla.org (vdb-entry, x_refsource_SECTRACK)
security@mozilla.org (x_refsource_CONFIRM)
security@mozilla.org (x_refsource_CONFIRM)
security@mozilla.org (vendor-advisory, x_refsource_SUSE)
security@mozilla.org (x_refsource_CONFIRM, Vendor Advisory)