Directory traversal

2014-03-1910:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.004 Low

EPSS

Percentile

73.8%

JSON

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.

CPENameOperatorVersion
firefoxle27.0.1
firefoxeq0.1
firefoxeq0.2
firefoxeq0.3
firefoxeq0.4
firefoxeq0.5
firefoxeq0.6
firefoxeq0.6.1
firefoxeq0.7
firefoxeq0.7.1