Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-6041
HistorySep 02, 2014 - 10:55 a.m.

CVE-2014-6041

2014-09-0210:55:00
CWE-264
[email protected]
web.nvd.nist.gov
84
android
webview
same origin policy
remote attack
cve-2014-6041
security vulnerability
nvd

6.7 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.924 High

EPSS

Percentile

99.0%

JSON

The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \u0000 character, as demonstrated by an onclick="window.open('\u0000javascript: sequence to the Android Browser application 4.2.1 or a third-party web browser.

Related

threatpost 3
prion 1
thn 2
packetstorm 1
securityvulns 1
cvelist 1
checkpoint_advisories 1
metasploit 1
nessus 1
threatpost
threatpost
Google Play Bug Can Allow Code Execution
2015-02-11 13:05:49
Back-and-Forth With Google Led to Disclosure of Android Browser Flaw
2014-09-16 12:08:56
Flaw in Android Browser Allows Same Origin Policy Bypass
2014-09-15 13:32:26
prion
prion
Design/Logic Flaw
2014-09-02 10:55:00
thn
thn
Hacking Facebook Accounts Using Android 'Same Origin Policy' Vulnerability
2014-12-29 00:39:00
New Android Browser Vulnerability Is a “Privacy Disaster” for 70% Of Android Users
2014-09-16 15:21:00
packetstorm
packetstorm
Android Browser CSP Bypass
2014-10-13 00:00:00
securityvulns
securityvulns
CSP Bypass in android browser prior to 4.4
2014-10-14 00:00:00
cvelist
cvelist
CVE-2014-6041
2014-09-02 10:00:00
checkpoint_advisories
checkpoint_advisories
Google Android Browser Same Origin Policy Bypass (CVE-2014-6041)
2014-09-22 00:00:00
metasploit
metasploit
Android Browser RCE Through Google Play Store XFO
2015-02-10 17:03:46
nessus
nessus
Google Android Operating System < 4.4.0 Multiple Vulnerabilities
2015-04-10 00:00:00

6.7 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.924 High

EPSS

Percentile

99.0%

JSON
Related for CVE-2014-6041
threatpost3prion1thn2packetstorm1securityvulns1cvelist1checkpoint_advisories1metasploit1nessus1