CVE-2014-1506: Mozilla Firefox

Medium severity, CVSS 6.4. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.

Affected products

• Mozilla Firefox: up to and including 27.0.1; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …
• Oracle Solaris: version 11.3 only

Published 2014-03-19. Last modified 2026-06-17.