Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-4968
HistoryFeb 12, 2020 - 1:15 a.m.

CVE-2014-4968

2020-02-1201:15:10
[email protected]
web.nvd.nist.gov
48
webview
boat browser
android
remote code execution
cve-2014-4968
security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON

The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for Android allow remote attackers to execute arbitrary code via a crafted web site, a related issue to CVE-2012-6636.

Affected configurations

NVD
Node
boatmobboat_browserMatch8.0android
OR
boatmobboat_browserMatch8.0.1android

Related

packetstorm 1
nvd 4
prion 4
cvelist 4
zdt 2
exploitpack 1
jvn 1
seebug 1
exploitdb 1
cve 3
android 1
ubuntucve 1
lenovo 2
packetstorm
packetstorm
Boat Browser 8.0 / 8.0.1 Remote Code Execution
2014-07-16 00:00:00
nvd
nvd
CVE-2014-4968
2020-02-12 01:15:10
CVE-2012-6636
2014-03-03 04:50:46
CVE-2013-4710
2014-03-03 04:50:46
prion
prion
Design/Logic Flaw
2020-02-12 01:15:00
Design/Logic Flaw
2014-04-15 23:13:00
Server side request forgery (ssrf)
2014-03-03 04:50:00
cvelist
cvelist
CVE-2014-4968
2020-02-12 00:19:24
CVE-2012-6636
2014-03-03 02:00:00
CVE-2014-0514
2014-04-15 20:00:00
zdt
zdt
Boat Browser 8.0 and 8.0.1 - Remote Code Execution Vulnerability
2014-07-17 00:00:00
Android 4.2 Browser and WebView - addJavascriptInterface Code Execution Exploit
2017-03-23 00:00:00
exploitpack
exploitpack
Boat Browser 8.08.0.1 - Remote Code Execution
2014-07-16 00:00:00
jvn
jvn
JVN#62161191: JavaFX WebEngine does not properly restrict Java method execution
2020-07-28 00:00:00
seebug
seebug
Boat Browser 8.0 and 8.0.1 - Remote Code Execution Vulnerability
2014-07-17 00:00:00
exploitdb
exploitdb
Boat Browser 8.0/8.0.1 - Remote Code Execution
2014-07-16 00:00:00
cve
cve
CVE-2014-0514
2014-04-15 23:13:14
CVE-2012-6636
2014-03-03 04:50:46
CVE-2013-4710
2014-03-03 04:50:46
android
android
JavaScript to Java
2012-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2012-6636
2014-03-03 00:00:00
lenovo
lenovo
SHAREit for Android Vulnerabilities
2017-05-08 00:00:00
SHAREit for Android Vulnerabilities - Lenovo Support US
2017-05-08 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON
Related for CVE-2014-4968
packetstorm1nvd4prion4cvelist4zdt2exploitpack1jvn1seebug1exploitdb1cve3android1ubuntucve1lenovo2