CVE-2014-1484

Published: Feb 6, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

openSUSE-SU-2014:0212

vendor-advisory

x_refsource_SUSE

https://bugzilla.mozilla.org/show_bug.cgi?id=953993

x_refsource_CONFIRM

102870

vdb-entry

x_refsource_OSVDB

20140326 Firefox for Android Profile Directory Derandomization and Data Exfiltration (CVE-2014-1484, CVE-2014-1506, CVE-2014-1515, CVE-2014-1516)

mailing-list

x_refsource_BUGTRAQ

65323

vdb-entry

x_refsource_BID

1029719

vdb-entry

x_refsource_SECTRACK

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

x_refsource_CONFIRM

firefox-android-cve20141484-info-disc(90892)

vdb-entry

x_refsource_XF

http://www.mozilla.org/security/announce/2014/mfsa2014-06.html

x_refsource_CONFIRM

SUSE-SU-2014:0248

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-1484

Description

Affected Products

References