CVE-2013-2304

2013-04-1610:00:00

jpcert

www.cve.org

sleipnir mobile

android

remote attackers

downloads

sensitive information

crafted web page

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

65.8%

JSON

The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.

References

jvn.jp/en/jp/JVN02895867/index.html

jvndb.jvn.jp/jvndb/JVNDB-2013-000033