CVE-2014-1507 describes a directory traversal vulnerability within the DeviceStorage API in Mozilla FirefoxOS versions prior to 1.2.2. This flaw allows a malicious application to bypass media sandbox protections by using a relative pathname for a DeviceStorageFile object. With a CVSS score of 9.3 (Critical), successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of arbitrary files on the device. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the high severity warrants attention for affected systems.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.3CPE matchmatch criteria | cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:* | ||
<= 1.2CPE matchmatch criteria | cpe:2.3:o:mozilla:firefoxos:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.