← Back

CVE-2014-1506

nvd nist
Published: Mar 19, 2014Modified: May 6, 2026

JSON object

Loading...
6.4
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:P
Exploitability: 10.0 / Impact: 4.9
Source: NVD

Description

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.

Affected (218)

Products: Mozilla: Firefox · Oracle: Solaris
Mozilla
1 product
Firefox
Oracle
1 product
Solaris
Configuration A
217 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Up to 27.0.1
Firefox
Version 0.10.1
Firefox
Version 0.10
Firefox
Version 0.1
Firefox
Version 0.2
Firefox
Version 0.3
Firefox
Version 0.4
Firefox
Version 0.5
Firefox
Version 0.6.1
Firefox
Version 0.6
Firefox
Version 0.7.1
Firefox
Version 0.7
Firefox
Version 0.8
Firefox
Version 0.9.1
Firefox
Version 0.9.2
Firefox
Version 0.9.3
Firefox
Version 0.9
Firefox
Version 0.9 rc
Firefox
Version 1.0.1
Firefox
Version 1.0.2
Firefox
Version 1.0.3
Firefox
Version 1.0.4
Firefox
Version 1.0.5
Firefox
Version 1.0.6
Firefox
Version 1.0.7
Firefox
Version 1.0.8
Firefox
Version 1.0
Firefox
Version 1.0 preview_release
Firefox
Version 1.5.0.10
Firefox
Version 1.5.0.11
Firefox
Version 1.5.0.12
Firefox
Version 1.5.0.1
Firefox
Version 1.5.0.2
Firefox
Version 1.5.0.3
Firefox
Version 1.5.0.4
Firefox
Version 1.5.0.5
Firefox
Version 1.5.0.6
Firefox
Version 1.5.0.7
Firefox
Version 1.5.0.8
Firefox
Version 1.5.0.9
Firefox
Version 1.5.1
Firefox
Version 1.5.2
Firefox
Version 1.5.3
Firefox
Version 1.5.4
Firefox
Version 1.5.5
Firefox
Version 1.5.6
Firefox
Version 1.5.7
Firefox
Version 1.5.8
Firefox
Version 1.5
Firefox
Version 1.5 beta1
Firefox
Version 1.5 beta2
Firefox
Version 10.0.10
Firefox
Version 10.0.11
Firefox
Version 10.0.12
Firefox
Version 10.0.1
Firefox
Version 10.0.2
Firefox
Version 10.0.3
Firefox
Version 10.0.4
Firefox
Version 10.0.5
Firefox
Version 10.0.6
Firefox
Version 10.0.7
Firefox
Version 10.0.8
Firefox
Version 10.0.9
Firefox
Version 10.0
Firefox
Version 11.0
Firefox
Version 12.0
Firefox
Version 12.0 beta6
Firefox
Version 13.0.1
Firefox
Version 13.0
Firefox
Version 14.0.1
Firefox
Version 14.0
Firefox
Version 15.0.1
Firefox
Version 15.0
Firefox
Version 16.0.1
Firefox
Version 16.0.2
Firefox
Version 16.0
Firefox
Version 17.0.10
Firefox
Version 17.0.11
Firefox
Version 17.0.2
Firefox
Version 17.0.3
Firefox
Version 17.0.4
Firefox
Version 17.0.5
Firefox
Version 17.0.6
Firefox
Version 17.0.7
Firefox
Version 17.0.8
Firefox
Version 17.0.9
Firefox
Version 18.0.1
Firefox
Version 18.0.2
Firefox
Version 18.0
Firefox
Version 19.0.1
Firefox
Version 19.0.2
Firefox
Version 19.0
Firefox
Version 2.0.0.10
Firefox
Version 2.0.0.11
Firefox
Version 2.0.0.12
Firefox
Version 2.0.0.13
Firefox
Version 2.0.0.14
Firefox
Version 2.0.0.15
Firefox
Version 2.0.0.16
Firefox
Version 2.0.0.17
Firefox
Version 2.0.0.18
Firefox
Version 2.0.0.19
Firefox
Version 2.0.0.1
Firefox
Version 2.0.0.20
Firefox
Version 2.0.0.2
Firefox
Version 2.0.0.3
Firefox
Version 2.0.0.4
Firefox
Version 2.0.0.5
Firefox
Version 2.0.0.6
Firefox
Version 2.0.0.7
Firefox
Version 2.0.0.8
Firefox
Version 2.0.0.9
Firefox
Version 2.0
Firefox
Version 20.0.1
Firefox
Version 20.0
Firefox
Version 21.0
Firefox
Version 23.0.1
Firefox
Version 23.0
Firefox
Version 24.0
Firefox
Version 24.1.1
Firefox
Version 24.1
Firefox
Version 25.0.1
Firefox
Version 25.0
Firefox
Version 26.0
Firefox
Version 27.0
Firefox
Version 3.0.10
Firefox
Version 3.0.11
Firefox
Version 3.0.12
Firefox
Version 3.0.13
Firefox
Version 3.0.14
Firefox
Version 3.0.15
Firefox
Version 3.0.16
Firefox
Version 3.0.17
Firefox
Version 3.0.18
Firefox
Version 3.0.19
Firefox
Version 3.0.1
Firefox
Version 3.0.2
Firefox
Version 3.0.3
Firefox
Version 3.0.4
Firefox
Version 3.0.5
Firefox
Version 3.0.6
Firefox
Version 3.0.7
Firefox
Version 3.0.8
Firefox
Version 3.0.9
Firefox
Version 3.0
Firefox
Version 3.5.10
Firefox
Version 3.5.11
Firefox
Version 3.5.12
Firefox
Version 3.5.13
Firefox
Version 3.5.14
Firefox
Version 3.5.15
Firefox
Version 3.5.16
Firefox
Version 3.5.17
Firefox
Version 3.5.18
Firefox
Version 3.5.19
Firefox
Version 3.5.1
Firefox
Version 3.5.2
Firefox
Version 3.5.3
Firefox
Version 3.5.4
Firefox
Version 3.5.5
Firefox
Version 3.5.6
Firefox
Version 3.5.7
Firefox
Version 3.5.8
Firefox
Version 3.5.9
Firefox
Version 3.5
Firefox
Version 3.6.10
Firefox
Version 3.6.11
Firefox
Version 3.6.12
Firefox
Version 3.6.13
Firefox
Version 3.6.14
Firefox
Version 3.6.15
Firefox
Version 3.6.16
Firefox
Version 3.6.17
Firefox
Version 3.6.18
Firefox
Version 3.6.19
Firefox
Version 3.6.20
Firefox
Version 3.6.21
Firefox
Version 3.6.22
Firefox
Version 3.6.23
Firefox
Version 3.6.24
Firefox
Version 3.6.25
Firefox
Version 3.6.26
Firefox
Version 3.6.27
Firefox
Version 3.6.28
Firefox
Version 3.6.2
Firefox
Version 3.6.3
Firefox
Version 3.6.4
Firefox
Version 3.6.6
Firefox
Version 3.6.7
Firefox
Version 3.6.8
Firefox
Version 3.6.9
Firefox
Version 3.6
Firefox
Version 4.0.1
Firefox
Version 4.0
Firefox
Version 4.0 beta10
Firefox
Version 4.0 beta11
Firefox
Version 4.0 beta12
Firefox
Version 4.0 beta1
Firefox
Version 4.0 beta2
Firefox
Version 4.0 beta3
Firefox
Version 4.0 beta4
Firefox
Version 4.0 beta5
Firefox
Version 4.0 beta6
Firefox
Version 4.0 beta7
Firefox
Version 4.0 beta8
Firefox
Version 4.0 beta9
Firefox
Version 5.0.1
Firefox
Version 5.0
Firefox
Version 6.0.1
Firefox
Version 6.0.2
Firefox
Version 6.0
Firefox
Version 7.0.1
Firefox
Version 7.0
Firefox
Version 8.0.1
Firefox
Version 8.0
Firefox
Version 9.0.1
Firefox
Version 9.0
Running on/withPlatform Versions
Google
Android
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Solaris
Version 11.3

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (10)

Source: security@mozilla.org
Third Party Advisory
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Third Party Advisory
Source: security@mozilla.org
Third Party AdvisoryVDB Entry
Source: security@mozilla.org
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking

Timeline

No history available yet.