Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.

Versions of Mozilla Firefox older than 28.0 contain multiple unspecified vulnerabilities that have since been fixed by the vendor. Such vulnerabilities include: 

  - Local files in the Firefox profile directory are accessible by selecting "Open Link in New Tab" from the context menu on a 'file:' protocol hyperlink. (CVE-2014-1501)

  - Directory traversal vulnerability in Android Crash Reporter due to insufficient input sanitation to the Android Crash Reporter arguments. (CVE-2014-1506)

The Mozilla Project reports :

MFSA 2014-15 Miscellaneous memory safety hazards (rv:28.0 / rv:24.4)

MFSA 2014-16 Files extracted during updates are not always read only

MFSA 2014-17 Out of bounds read during WAV file decoding

MFSA 2014-18 crypto.generateCRMFRequest does not validate type of key

MFSA 2014-19 Spoofing attack on WebRTC permission prompt

MFSA 2014-20 onbeforeunload and JavaScript navigation DOS

MFSA 2014-21 Local file access via Open Link in new tab

MFSA 2014-22 WebGL content injection from one domain to rendering in another

MFSA 2014-23 Content Security Policy for data: documents not preserved by session restore

MFSA 2014-24 Android Crash Reporter open to manipulation

MFSA 2014-25 Firefox OS DeviceStorageFile object vulnerable to relative path escape

MFSA 2014-26 Information disclosure through polygon rendering in MathML

MFSA 2014-27 Memory corruption in Cairo during PDF font rendering

MFSA 2014-28 SVG filters information disclosure through feDisplacementMap

MFSA 2014-29 Privilege escalation using WebIDL-implemented APIs

MFSA 2014-30 Use-after-free in TypeObject

MFSA 2014-31 Out-of-bounds read/write through neutering ArrayBuffer objects

MFSA 2014-32 Out-of-bounds write through TypedArrayObject after neutering

ID	Name	Product	Family	Type	Severity
8174	Mozilla Firefox for Android < 28.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		medium
73111	FreeBSD : mozilla -- multiple vulnerabilities (610de647-af8d-11e3-a25b-b4b52fce4ce8)	Nessus	FreeBSD Local Security Checks	Local	critical

Detections

Analytics

CVE-2014-1506

medium

Tenable Plugins

medium

critical