Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1515.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2014-09-03T10:00:00

Updated: 2024-08-06T09:42:36.374Z

Reserved: 2014-01-16T00:00:00

Link: CVE-2014-1566

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2014-09-03T10:55:06.713

Modified: 2024-11-21T02:04:35.910

Link: CVE-2014-1566

cve-icon Redhat

No data.