Lucene search
Ubuntu.comUB:CVE-2014-1566HistorySep 03, 2014 - 12:00 a.m.
CVE-2014-1566
2014-09-0300:00:00
ubuntu.com
ubuntu.com
4
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
47.8%
Mozilla Firefox before 31.1 on Android does not properly restrict copying
of local files onto the SD card during processing of file: URLs, which
allows attackers to obtain sensitive information from the Firefox profile
directory via a crafted application. NOTE: this vulnerability exists
because of an incomplete fix for CVE-2014-1515.
Notes
| Author | Note |
|---|---|
| chrisccoulson | Affects Firefox for Android only |
Related
prion
prion
Design/Logic Flaw
2014-09-03 10:55:00
Design/Logic Flaw
2014-03-25 13:25:00
cve
cve
CVE-2014-1566
2014-09-03 10:55:00
CVE-2014-1515
2014-03-25 13:25:00
cvelist
cvelist
CVE-2014-1566
2014-09-03 10:00:00
CVE-2014-1515
2014-03-25 01:00:00
mozilla
mozilla
Profile directory file access through file: protocol â Mozilla
2014-09-02 00:00:00
File: protocol links downloaded to SD card by default â Mozilla
2014-03-25 00:00:00
seebug
seebug
Mozilla Firefox for Android 'file'ĺ莎俥ćŻćłé˛ćźć´
2014-03-26 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2014-33) - Deprecated
2021-11-11 00:00:00
Gentoo Security Advisory GLSA 201504-01
2015-09-29 00:00:00
nessus
nessus
Mozilla Firefox for Android < 28.0.1 Multiple Vulnerabilities
2014-03-26 00:00:00
GLSA-201504-01 : Mozilla Products: Multiple vulnerabilities
2015-04-08 00:00:00
thn
thn
Multiple Vulnerabilities in Firefox for Android Leak Sensitive Information
2014-03-26 22:00:00
securityvulns
securityvulns
Firefox for Android Profile Directory Derandomization and Data Exfiltration (CVE-2014-1484, CVE-2014-1506, CVE-2014-1515, CVE-2014-1516)
2014-03-27 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-09-15 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2014-05-01 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2015-04-07 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
47.8%
Related for UB:CVE-2014-1566