Lucene search
MitreCVE-2014-1886HistoryMar 03, 2014 - 4:50 a.m.
CVE-2014-1886
2014-03-0304:50:46
CWE-264
mitre
web.nvd.nist.gov
18
edinburgh by bus
android
security vulnerability
remote code execution
adobe phonegap
cve-2014-1886
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.011
Percentile
84.3%
The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently access external-storage resources, by leveraging control over one of a number of “obscure Eastern European dating sites.”
Affected configurations
Node
edinburghtouredinburgh_by_busMatch-android
adobephonegapMatch2.0.0
ORadobephonegapMatch2.0.0rc1
ORadobephonegapMatch2.1.0
ORadobephonegapMatch2.2.0
ORadobephonegapMatch2.2.0rc1
ORadobephonegapMatch2.2.0rc2
ORadobephonegapMatch2.3.0
ORadobephonegapMatch2.3.0rc1
ORadobephonegapMatch2.3.0rc2
ORadobephonegapMatch2.4.0
ORadobephonegapMatch2.4.0rc1
ORadobephonegapMatch2.5.0
ORadobephonegapMatch2.5.0rc1
ORadobephonegapMatch2.6.0
ORadobephonegapMatch2.6.0rc1
ORadobephonegapMatch2.7.0
ORadobephonegapMatch2.7.0rc1
ORadobephonegapMatch2.8.0
ORadobephonegapMatch2.8.1
ORadobephonegapMatch2.9.0
ORadobephonegapMatch2.9.0rc1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| edinburghtour | edinburgh_by_bus | - | cpe:2.3:a:edinburghtour:edinburgh_by_bus:-:*:*:*:*:android:*:* |
| adobe | phonegap | 2.0.0 | cpe:2.3:a:adobe:phonegap:2.0.0:*:*:*:*:*:*:* |
| adobe | phonegap | 2.0.0 | cpe:2.3:a:adobe:phonegap:2.0.0:rc1:*:*:*:*:*:* |
| adobe | phonegap | 2.1.0 | cpe:2.3:a:adobe:phonegap:2.1.0:*:*:*:*:*:*:* |
| adobe | phonegap | 2.2.0 | cpe:2.3:a:adobe:phonegap:2.2.0:*:*:*:*:*:*:* |
| adobe | phonegap | 2.2.0 | cpe:2.3:a:adobe:phonegap:2.2.0:rc1:*:*:*:*:*:* |
| adobe | phonegap | 2.2.0 | cpe:2.3:a:adobe:phonegap:2.2.0:rc2:*:*:*:*:*:* |
| adobe | phonegap | 2.3.0 | cpe:2.3:a:adobe:phonegap:2.3.0:*:*:*:*:*:*:* |
| adobe | phonegap | 2.3.0 | cpe:2.3:a:adobe:phonegap:2.3.0:rc1:*:*:*:*:*:* |
| adobe | phonegap | 2.3.0 | cpe:2.3:a:adobe:phonegap:2.3.0:rc2:*:*:*:*:*:* |
Related
prion
prion
Code injection
2014-03-03 04:50:00
nvd
nvd
CVE-2014-1886
2014-03-03 04:50:46
seebug
seebug
Edinburgh by Bus application安全绕过任意Javascript代码执行漏洞
2014-03-07 00:00:00
ubuntucve
ubuntucve
CVE-2014-1886
2014-03-03 00:00:00
cvelist
cvelist
CVE-2014-1886
2014-03-03 02:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.011
Percentile
84.3%
Related for CVE-2014-1886