CVE-2014-1566 PUBLISHED CVSS 4.300000190734863 MEDIUM

Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1515.

EPSS 0.63% · 70.1th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.63%
70.1th percentile

Affected Products

VendorProductVersions
mozillafirefox30.0, 0
n/an/an/a

Timeline

References

Open in Interactive Console →