CVE-2014-1507: Mozilla Firefoxos

High severity, CVSS 9.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify arbitrary files, via a crafted application that uses a relative pathname for a DeviceStorageFile object.

Affected products

• Mozilla Firefoxos: up to and including 1.2
• Oracle Solaris: version 11.3 only

Published 2014-03-19. Last modified 2026-06-17.