medium5.0

CVE-2014-1484

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive informat…

Impact

Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.

Affected products

Vendor	Product	Affected versions
Suse	Linux Enterprise Desktop	Version 11
Suse	Linux Enterprise Server	Version 11
Suse	Linux Enterprise Software Development Kit	Version 11
Mozilla	Firefox	through 26.0 Versions 0.1, 0.2, 0.3, 0.4, 0.5
Opensuse	Opensuse	Version 13.1
Opensuse Project	Opensuse	Version 12.3
Oracle	Solaris	Version 11.3

Weakness classification

CWE-200

References

NVD record
CVE.org record
http://archives.neohapsis.com/archives/bugtraq/2014-03/0153.html
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html
http://osvdb.org/102870
http://www.mozilla.org/security/announce/2014/mfsa2014-06.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/65323
http://www.securitytracker.com/id/1029719
https://bugzilla.mozilla.org/show_bug.cgi?id=953993
https://exchange.xforce.ibmcloud.com/vulnerabilities/90892
http://archives.neohapsis.com/archives/bugtraq/2014-03/0153.html
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00010.html
http://osvdb.org/102870
http://www.mozilla.org/security/announce/2014/mfsa2014-06.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
http://www.securityfocus.com/bid/65323
http://www.securitytracker.com/id/1029719
https://bugzilla.mozilla.org/show_bug.cgi?id=953993
https://exchange.xforce.ibmcloud.com/vulnerabilities/90892