Lucene search

K
cveMitreCVE-2014-1449
HistoryDec 25, 2014 - 9:59 p.m.

CVE-2014-1449

2014-12-2521:59:00
CWE-284
mitre
web.nvd.nist.gov
25
maxthon cloud browser
android
address bar spoofing
javascript
cve-2014-1449

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.002

Percentile

64.7%

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.

Affected configurations

Nvd
Node
maxthonmaxthon_cloud_browserRange4.1.5.2000android
VendorProductVersionCPE
maxthonmaxthon_cloud_browser*cpe:2.3:a:maxthon:maxthon_cloud_browser:*:*:*:*:*:android:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.002

Percentile

64.7%

Related for CVE-2014-1449