CVE-2020-6828

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the…

published April 24, 2020

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.<br> *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.7.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01508 · 74.2th percentile
Published
2020-04-24T15:48Z
EPSS history
Timeline
  • 24 APR 15:48Z
    A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the…
    cvelistv5