PT-2015-1923 · Mozilla · Firefox Os

Clément Lefèvre · Published 2015-08-06 · Updated 2015-08-21 · CVE-2015-5960

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.2

Description The issue is related to inadequate access control in the operating system, which can be exploited by a local attacker to bypass the pass-code protection mechanism. This allows the attacker to access USB Mass Storage media volumes by utilizing the USB interface for a mount operation.

Recommendations For versions prior to 2.2, consider restricting access to the USB interface to minimize the risk of exploitation until a patch is available.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2015-11269

CVE-2015-5960

Affected Products

Firefox Os

References · 5

• http://mozilla.org/security/announce/2015/mfsa2015-74.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11269 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-5960 · Security Note
• http://securityfocus.com/bid/76254 · Note
• https://bugzilla.mozilla.org/show_bug.cgi?id=1111725 · Note