CVE-2015-7190: Infoleak
The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7190?
CVE-2015-7190 is ranked as a high-severity vulnerability due to its potential to allow unauthorized access to sensitive data.
How do I fix CVE-2015-7190?
To remediate CVE-2015-7190, update Mozilla Firefox to version 42.0 or later.
Which versions of Firefox are affected by CVE-2015-7190?
CVE-2015-7190 affects Mozilla Firefox versions before 42.0.
What platforms are vulnerable to CVE-2015-7190?
CVE-2015-7190 specifically affects the Firefox browser on Android devices running version 4.4 or earlier.
What type of attack does CVE-2015-7190 facilitate?
CVE-2015-7190 allows attackers to exploit privileged context access to read log files and access sensitive file URLs.