foundation-security-advisories/announce/2014/mfsa2014-06.md

announced	fixed_in	impact	reporter	title
February 4, 2014	Firefox 27	Moderate	Roee Hay	Profile path leaks to Android system log

Description

Mozilla developer Roee Hay reported that Firefox for Android profile paths leak to the Android system log. When running on Android 4.2 or earlier, other applications are able to read these log files, leading to information disclosure from the user's profile directory. This issue was also independently reported by Mozilla developer Richard Newman.

References

• Fennec leaks profile path to logcat (CVE-2014-1484)