Lucene search

K
cve[email protected]CVE-2014-1515
HistoryMar 25, 2014 - 1:25 p.m.

CVE-2014-1515

2014-03-2513:25:00
CWE-200
web.nvd.nist.gov
19
cve-2014-1515
mozilla firefox
android
file url
sd card
sensitive information
nvd

5.8 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

40.7%

Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application.

CPENameOperatorVersion
mozilla:firefoxmozilla firefoxle28.0

5.8 Medium

AI Score

Confidence

Low

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

40.7%