JVN#99730704: Sleipnir Mobile for Android vulnerable to arbitrary Java method execution

Sleipnir Mobile for Android is a web browser for Android devices. Sleipnir Mobile for Android contains an arbitrary Java method execution vulnerability.

Impact

When opening a specially crafted website, an attacker may be able to execute an arbitrary Java method. As a result, information stored in Android devices may be obtained and an arbitrary OS command may be executed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• Sleipnir Mobile for Android 2.2.0 and earlier
• Sleipnir Mobile for Android Black Edition 2.2.0 and earlier