Information Exposure in Mozilla Firefox for Android on Pre-27.0 Versions
CVE-2014-1484

Currently unrated

Key Information:

Vendor
Suse
Status
Linux Enterprise Desktop
Linux Enterprise Server
Linux Enterprise Software Development Kit
Vendor
CVE Published:
6 February 2014

Summary

An information exposure vulnerability exists in earlier versions of Mozilla Firefox for Android (prior to version 27.0) that generates system-log entries revealing profile paths. By exploiting this flaw, an attacker can potentially obtain sensitive information through a specially crafted application, leading to privacy concerns for users.

References

http://lists.opensuse.org/opensuse-security-announce/2014...
vendor-advisoryx_refsource_SUSE
https://bugzilla.mozilla.org/show_bug.cgi?id=953993
x_refsource_CONFIRM
http://osvdb.org/102870
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.