CVE-2014-1507: Path Traversal
Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1507?
CVE-2014-1507 has been rated as a moderate severity vulnerability due to its potential to bypass media sandbox protections.
How do I fix CVE-2014-1507?
To fix CVE-2014-1507, you should update to Mozilla FirefoxOS version 1.2.2 or later, which addresses this vulnerability.
What platforms are affected by CVE-2014-1507?
CVE-2014-1507 affects Mozilla FirefoxOS versions up to 1.2 and Oracle Solaris 11.3.
What can an attacker do with CVE-2014-1507?
An attacker exploiting CVE-2014-1507 can read or modify arbitrary files on the device by using a crafted application.
How does CVE-2014-1507 exploit the DeviceStorage API?
CVE-2014-1507 exploits the DeviceStorage API by using a relative pathname, allowing unauthorized access to the file system.