CVE-2014-1484 Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE linux enterprise desktop | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
| mozilla Firefox | <= 26.0 | No fix listed |
| mozilla Firefox | = 0.1 | No fix listed |
| mozilla Firefox | = 0.2 | No fix listed |
| mozilla Firefox | = 0.3 | No fix listed |
| mozilla Firefox | = 0.4 | No fix listed |
| mozilla Firefox | = 0.5 | No fix listed |
| mozilla Firefox | = 0.6 | No fix listed |
| mozilla Firefox | = 0.6.1 | No fix listed |
| mozilla Firefox | = 0.7 | No fix listed |
| mozilla Firefox | = 0.7.1 | No fix listed |
| mozilla Firefox | = 0.8 | No fix listed |
| mozilla Firefox | = 0.9 | No fix listed |
| mozilla Firefox | = 0.9-rc | No fix listed |
| mozilla Firefox | = 0.9.1 | No fix listed |
| mozilla Firefox | = 0.9.2 | No fix listed |
| mozilla Firefox | = 0.9.3 | No fix listed |
| mozilla Firefox | = 0.10 | No fix listed |
| mozilla Firefox | = 0.10.1 | No fix listed |
| mozilla Firefox | = 1.0 | No fix listed |
| mozilla Firefox | = 1.0-preview_release | No fix listed |
| mozilla Firefox | = 1.0.1 | No fix listed |
| mozilla Firefox | = 1.0.2 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | = 1.0.3 | No fix listed |
| mozilla Firefox | = 1.0.4 | No fix listed |
| mozilla Firefox | = 1.0.5 | No fix listed |
| mozilla Firefox | = 1.0.6 | No fix listed |
| mozilla Firefox | = 1.0.7 | No fix listed |
| mozilla Firefox | = 1.0.8 | No fix listed |
| mozilla Firefox | = 1.5 | No fix listed |
| mozilla Firefox | = 1.5-beta1 | No fix listed |
| mozilla Firefox | = 1.5-beta2 | No fix listed |
| mozilla Firefox | = 1.5.0.1 | No fix listed |
| mozilla Firefox | = 1.5.0.2 | No fix listed |
| mozilla Firefox | = 1.5.0.3 | No fix listed |
| mozilla Firefox | = 1.5.0.4 | No fix listed |
| mozilla Firefox | = 1.5.0.5 | No fix listed |
| mozilla Firefox | = 1.5.0.6 | No fix listed |
| mozilla Firefox | = 1.5.0.7 | No fix listed |
| mozilla Firefox | = 1.5.0.8 | No fix listed |
| mozilla Firefox | = 1.5.0.9 | No fix listed |
| mozilla Firefox | = 1.5.0.10 | No fix listed |
| mozilla Firefox | = 1.5.0.11 | No fix listed |
| mozilla Firefox | = 1.5.0.12 | No fix listed |
| mozilla Firefox | = 1.5.1 | No fix listed |
| mozilla Firefox | = 1.5.2 | No fix listed |
| mozilla Firefox | = 1.5.3 | No fix listed |
| mozilla Firefox | = 1.5.4 | No fix listed |
| mozilla Firefox | = 1.5.5 | No fix listed |
| mozilla Firefox | = 1.5.6 | No fix listed |
| mozilla Firefox | = 1.5.7 | No fix listed |
| mozilla Firefox | = 1.5.8 | No fix listed |
| mozilla Firefox | = 2.0 | No fix listed |
| mozilla Firefox | = 2.0.0.1 | No fix listed |
| mozilla Firefox | = 2.0.0.2 | No fix listed |
| mozilla Firefox | = 2.0.0.3 | No fix listed |
| mozilla Firefox | = 2.0.0.4 | No fix listed |
| mozilla Firefox | = 2.0.0.5 | No fix listed |
| mozilla Firefox | = 2.0.0.6 | No fix listed |
| mozilla Firefox | = 2.0.0.7 | No fix listed |
| mozilla Firefox | = 2.0.0.8 | No fix listed |
| mozilla Firefox | = 2.0.0.9 | No fix listed |
| mozilla Firefox | = 2.0.0.10 | No fix listed |
| mozilla Firefox | = 2.0.0.11 | No fix listed |
| mozilla Firefox | = 2.0.0.12 | No fix listed |
| mozilla Firefox | = 2.0.0.13 | No fix listed |
| mozilla Firefox | = 2.0.0.14 | No fix listed |
| mozilla Firefox | = 2.0.0.15 | No fix listed |
| mozilla Firefox | = 2.0.0.16 | No fix listed |
| mozilla Firefox | = 2.0.0.17 | No fix listed |
| mozilla Firefox | = 2.0.0.18 | No fix listed |
| mozilla Firefox | = 2.0.0.19 | No fix listed |
| mozilla Firefox | = 2.0.0.20 | No fix listed |
| mozilla Firefox | = 3.0 | No fix listed |
| mozilla Firefox | = 3.0.1 | No fix listed |
| mozilla Firefox | = 3.0.2 | No fix listed |
| mozilla Firefox | = 3.0.3 | No fix listed |
| mozilla Firefox | = 3.0.4 | No fix listed |
| mozilla Firefox | = 3.0.5 | No fix listed |
| mozilla Firefox | = 3.0.6 | No fix listed |
| mozilla Firefox | = 3.0.7 | No fix listed |
| mozilla Firefox | = 3.0.8 | No fix listed |
| mozilla Firefox | = 3.0.9 | No fix listed |
| mozilla Firefox | = 3.0.10 | No fix listed |
| mozilla Firefox | = 3.0.11 | No fix listed |
| mozilla Firefox | = 3.0.12 | No fix listed |
| mozilla Firefox | = 3.0.13 | No fix listed |
| mozilla Firefox | = 3.0.14 | No fix listed |
| mozilla Firefox | = 3.0.15 | No fix listed |
| mozilla Firefox | = 3.0.16 | No fix listed |
| mozilla Firefox | = 3.0.17 | No fix listed |
| mozilla Firefox | = 3.0.18 | No fix listed |
| mozilla Firefox | = 3.0.19 | No fix listed |
| mozilla Firefox | = 3.5 | No fix listed |
| mozilla Firefox | = 3.5.1 | No fix listed |
| mozilla Firefox | = 3.5.2 | No fix listed |
| mozilla Firefox | = 3.5.3 | No fix listed |
| mozilla Firefox | = 3.5.4 | No fix listed |
| mozilla Firefox | = 3.5.5 | No fix listed |
| mozilla Firefox | = 3.5.6 | No fix listed |
| mozilla Firefox | = 3.5.7 | No fix listed |
| mozilla Firefox | = 3.5.8 | No fix listed |
| mozilla Firefox | = 3.5.9 | No fix listed |
| mozilla Firefox | = 3.5.10 | No fix listed |
| mozilla Firefox | = 3.5.11 | No fix listed |
| mozilla Firefox | = 3.5.12 | No fix listed |
| mozilla Firefox | = 3.5.13 | No fix listed |
| mozilla Firefox | = 3.5.14 | No fix listed |
| mozilla Firefox | = 3.5.15 | No fix listed |
| mozilla Firefox | = 3.5.16 | No fix listed |
| mozilla Firefox | = 3.5.17 | No fix listed |
| mozilla Firefox | = 3.5.18 | No fix listed |
| mozilla Firefox | = 3.5.19 | No fix listed |
| mozilla Firefox | = 3.6 | No fix listed |
| mozilla Firefox | = 3.6.2 | No fix listed |
| mozilla Firefox | = 3.6.3 | No fix listed |
| mozilla Firefox | = 3.6.4 | No fix listed |
| mozilla Firefox | = 3.6.6 | No fix listed |
| mozilla Firefox | = 3.6.7 | No fix listed |
| mozilla Firefox | = 3.6.8 | No fix listed |
| mozilla Firefox | = 3.6.9 | No fix listed |
| mozilla Firefox | = 3.6.10 | No fix listed |
| mozilla Firefox | = 3.6.11 | No fix listed |
| mozilla Firefox | = 3.6.12 | No fix listed |
| mozilla Firefox | = 3.6.13 | No fix listed |
| mozilla Firefox | = 3.6.14 | No fix listed |
| mozilla Firefox | = 3.6.15 | No fix listed |
| mozilla Firefox | = 3.6.16 | No fix listed |
| mozilla Firefox | = 3.6.17 | No fix listed |
| mozilla Firefox | = 3.6.18 | No fix listed |
| mozilla Firefox | = 3.6.19 | No fix listed |
| mozilla Firefox | = 3.6.20 | No fix listed |
| mozilla Firefox | = 3.6.21 | No fix listed |
| mozilla Firefox | = 3.6.22 | No fix listed |
| mozilla Firefox | = 3.6.23 | No fix listed |
| mozilla Firefox | = 3.6.24 | No fix listed |
| mozilla Firefox | = 3.6.25 | No fix listed |
| mozilla Firefox | = 3.6.26 | No fix listed |
| mozilla Firefox | = 3.6.27 | No fix listed |
| mozilla Firefox | = 3.6.28 | No fix listed |
| mozilla Firefox | = 4.0 | No fix listed |
| mozilla Firefox | = 4.0-beta1 | No fix listed |
| mozilla Firefox | = 4.0-beta10 | No fix listed |
| mozilla Firefox | = 4.0-beta11 | No fix listed |
| mozilla Firefox | = 4.0-beta12 | No fix listed |
| mozilla Firefox | = 4.0-beta2 | No fix listed |
| mozilla Firefox | = 4.0-beta3 | No fix listed |
| mozilla Firefox | = 4.0-beta4 | No fix listed |
| mozilla Firefox | = 4.0-beta5 | No fix listed |
| mozilla Firefox | = 4.0-beta6 | No fix listed |
| mozilla Firefox | = 4.0-beta7 | No fix listed |
| mozilla Firefox | = 4.0-beta8 | No fix listed |
| mozilla Firefox | = 4.0-beta9 | No fix listed |
| mozilla Firefox | = 4.0.1 | No fix listed |
| mozilla Firefox | = 5.0 | No fix listed |
| mozilla Firefox | = 5.0.1 | No fix listed |
| mozilla Firefox | = 6.0 | No fix listed |
| mozilla Firefox | = 6.0.1 | No fix listed |
| mozilla Firefox | = 6.0.2 | No fix listed |
| mozilla Firefox | = 7.0 | No fix listed |
| mozilla Firefox | = 7.0.1 | No fix listed |
| mozilla Firefox | = 8.0 | No fix listed |
| mozilla Firefox | = 8.0.1 | No fix listed |
| mozilla Firefox | = 9.0 | No fix listed |
| mozilla Firefox | = 9.0.1 | No fix listed |
| mozilla Firefox | = 10.0 | No fix listed |
| mozilla Firefox | = 10.0.1 | No fix listed |
| mozilla Firefox | = 10.0.2 | No fix listed |
| mozilla Firefox | = 10.0.3 | No fix listed |
| mozilla Firefox | = 10.0.4 | No fix listed |
| mozilla Firefox | = 10.0.5 | No fix listed |
| mozilla Firefox | = 10.0.6 | No fix listed |
| mozilla Firefox | = 10.0.7 | No fix listed |
| mozilla Firefox | = 10.0.8 | No fix listed |
| mozilla Firefox | = 10.0.9 | No fix listed |
| mozilla Firefox | = 10.0.10 | No fix listed |
| mozilla Firefox | = 10.0.11 | No fix listed |
| mozilla Firefox | = 10.0.12 | No fix listed |
| mozilla Firefox | = 11.0 | No fix listed |
| mozilla Firefox | = 12.0 | No fix listed |
| mozilla Firefox | = 12.0-beta6 | No fix listed |
| mozilla Firefox | = 13.0 | No fix listed |
| mozilla Firefox | = 13.0.1 | No fix listed |
| mozilla Firefox | = 14.0 | No fix listed |
| mozilla Firefox | = 14.0.1 | No fix listed |
| mozilla Firefox | = 15.0 | No fix listed |
| mozilla Firefox | = 15.0.1 | No fix listed |
| mozilla Firefox | = 16.0 | No fix listed |
| mozilla Firefox | = 16.0.1 | No fix listed |
| mozilla Firefox | = 16.0.2 | No fix listed |
| mozilla Firefox | = 17.0.2 | No fix listed |
| mozilla Firefox | = 17.0.3 | No fix listed |
| mozilla Firefox | = 17.0.4 | No fix listed |
| mozilla Firefox | = 17.0.5 | No fix listed |
| mozilla Firefox | = 17.0.6 | No fix listed |
| mozilla Firefox | = 17.0.7 | No fix listed |
| mozilla Firefox | = 17.0.8 | No fix listed |
| mozilla Firefox | = 17.0.9 | No fix listed |
References
- 20140326 Firefox for Android Profile Directory Derandomization and Data Exfiltration (CVE-2014-1484, CVE-2014-1506, CVE-2014-1515, CVE-2014-1516) mailing-list third-party-advisory
- openSUSE-SU-2014:0212 third-party-advisory vendor-advisory
- SUSE-SU-2014:0248 third-party-advisory vendor-advisory
- 102870 vdb-entry
- www.mozilla.org vendor-advisory
- www.oracle.com third-party-advisory
- 65323 vdb-entry
- 1029719 vdb-entry
- bugzilla.mozilla.org issue-tracking vendor-advisory
- firefox-android-cve20141484-info-disc(90892) vdb-entry