CVE-2014-1516

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions through 28.0.1

Description The issue relies on Android's weak approach to seeding the Math.random function, making it easier for attackers to bypass a profile-randomization protection mechanism via a crafted application. This is related to the saltProfileName function in base/GeckoProfileDirectories.java.

Recommendations For versions through 28.0.1, update to a version that addresses this issue to prevent attackers from bypassing the profile-randomization protection mechanism.