PT-2014-4211 · Mozilla+1 · Firefox+1

Publicado 2014-03-19 · Atualizado 2016-11-17 · CVE-2014-1501

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 28.0 on Android

Description The issue allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.

Recommendations For Mozilla Firefox versions prior to 28.0 on Android, update to version 28.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-1501

Produtos afetados

Firefox

Suse

Referências · 5

• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html · Aviso do Fabricante
• http://mozilla.org/security/announce/2014/mfsa2014-21.html · Aviso do Fabricante
• https://bugzilla.mozilla.org/show_bug.cgi?id=960135 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1501 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html · Nota