CVE-2015-7190
05.11.2015, 05:59
The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox | 𝑥 ≤ 41.0.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References