PT-2019-8893 · Mozilla+1 · Firefox For Android+1

Konark Modi · Published 2018-11-13 · Updated 2024-12-12 · CVE-2018-12400

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 63

Description A privacy issue exists in Firefox for Android where favicons are cached in the cache/icons folder during private browsing sessions, allowing information leakage of visited sites. This issue does not affect desktop versions of Firefox.

Recommendations For Firefox for Android versions prior to 63, update to version 63 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2018-2645

CVE-2018-12400

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox For Android

References · 1869

• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-12400 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2018-26 · Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1448305 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12400 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10600-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-25728 · Note
• https://suse.com/security/cve/CVE-2022-31743 · Note
• https://suse.com/security/cve/CVE-2018-12392 · Note
• https://suse.com/security/cve/CVE-2024-5698 · Note
• https://suse.com/security/cve/CVE-2013-1701 · Note
• https://suse.com/security/cve/CVE-2024-5687 · Note
• https://suse.com/security/cve/CVE-2022-24713 · Note
• https://suse.com/security/cve/CVE-2014-8642 · Note
• https://suse.com/security/cve/CVE-2015-4516 · Note