Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the Open Link in New Tab menu selection.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Solaris | Oracle | 11.3 (including) | 11.3 (including) |
| Firefox | Ubuntu | lucid | * |
| Firefox | Ubuntu | upstream | * |