EUVD-2014-1583

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile object...

CVE-2014-1507

The CVE-2014-1507 entry concerns Mozilla Firefox OS (DeviceStorage API) with a Directory Traversal affecting DeviceStorageFile objects. The vulnerability arises from using a relative pathname, enabling an attacker’s crafted app to bypass the media sandbox and read or modify arbitrary files. Affec...