Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-1506
HistoryMar 19, 2014 - 12:00 a.m.

CVE-2014-1506

2014-03-1900:00:00
ubuntu.com
ubuntu.com
8

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.004 Low

EPSS

Percentile

74.2%

Directory traversal vulnerability in Android Crash Reporter in Mozilla
Firefox before 28.0 on Android allows attackers to trigger the transmission
of local files to arbitrary servers, or cause a denial of service
(application crash), via a crafted application that specifies Android Crash
Reporter arguments.

Notes

Author Note
chrisccoulson Only affects Firefox on Android

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.004 Low

EPSS

Percentile

74.2%