Multiple Vulnerabilities in Firefox for Android Leak Sensitive Information

  • 27 March 2014
  • 0 replies
  • 587 views

Userlevel 7
Badge +52
The Android operating system has hardened its security with application Sandboxing features to ensure that no application can access sensitive information held by another without proper privileges.

Android applications communicate with each other through Intents and these intents can be abused by hackers to provide a channel for a malicious application to inject malicious data into a target, potentially vulnerable application.

Security Researchers at IBM have discovered multiple vulnerabilities in Firefox for Android platform that allow a malicious application to leak the sensitive information related to the user's profile.
 
Researchers have already reported these vulnerabilities to the Mozilla and three out of four are alreadybeen patched in the latest versions. Android users with Firefox installed in the device are advised to upgrade it to Mozilla Firefox 28.0 or later from the Google Play app store.
 
 
Full Article

0 replies

Be the first to reply!

Reply