PT-2013-2625
CVE-2013-0798
·
تاريخ النشر
2013-04-03
·
تاريخ التحديث
2013-06-05
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 20.0 on Android
Description
The issue allows attackers to modify add-ons before installation by leveraging the time window during which the app tmp directory is used, due to world-writable and world-readable permissions for the app tmp installation directory in the local filesystem.
Recommendations
For versions prior to 20.0 on Android, update to version 20.0 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾