Local file access via Open Link in new tab

ID MFSA2014-21
Type mozilla
Reporter Mozilla Foundation
Modified 2014-03-18T00:00:00


Security researcher Alex Inführ reported that on Firefox for Android it is possible to open links to local files from web content by selecting "Open Link in New Tab" from the context menu using the file: protocol. The web content would have to know the precise location of a malicious local file in order to exploit this issue. This issue does not affect Firefox on non-Android systems.