Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). Note: This issue only affected Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.11.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firefox_esr | Mozilla | * | 68.11 (excluding) |
| Firefox | Ubuntu | trusty | * |