Security Advisory

CVE-2014-1501

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-19 10:00:00
Last updated 2024-08-06 09:42:36
Assigner mozilla
CVSS score not scored
State PUBLISHED

Description

Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab" menu selection.