Lucene search
PRIOn knowledge basePRION:CVE-2012-6636HistoryMar 03, 2014 - 4:50 a.m.
Design/Logic Flaw
2014-03-0304:50:00
PRIOn knowledge base
www.prio-n.com
2
The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710.
| CPE | Name | Operator | Version |
|---|---|---|---|
| android_api | eq | 6.0 | |
| android_api | eq | 15.0 | |
| android_api | eq | 3.0 | |
| android_api | eq | 8.0 | |
| android_api | eq | 11.0 | |
| android_api | eq | 9.0 | |
| android_api | eq | 2.0 | |
| android_api | eq | 12.0 | |
| android_api | eq | 7.0 | |
| android_api | eq | 1.0 |
References
50.56.33.56/blog/?p=314
jvn.jp/en/jp/JVN62161191/index.html
openwall.com/lists/oss-security/2014/02/07/9
www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf
www.internetsociety.org/ndss2014/programme
developer.android.com/reference/android/os/Build.VERSION_CODES.html
developer.android.com/reference/android/webkit/WebView.html
support.lenovo.com/us/en/product_security/len_6421
Related
nvd
nvd
cvelist
cvelist
android
android
JavaScript to Java
2012-12-21 00:00:00
cve
cve
zdt
zdt
prion
prion
Server side request forgery (ssrf)
2014-03-03 04:50:00
Design/Logic Flaw
2020-02-12 01:15:00
Design/Logic Flaw
2014-04-15 23:13:00
ubuntucve
ubuntucve
CVE-2012-6636
2014-03-03 00:00:00
exploitpack
exploitpack
Boat Browser 8.08.0.1 - Remote Code Execution
2014-07-16 00:00:00
seebug
seebug
Boat Browser 8.0 and 8.0.1 - Remote Code Execution Vulnerability
2014-07-17 00:00:00
jvn
jvn
JVN#53768697: Android OS vulnerable to arbitrary Java method execution
2013-12-17 00:00:00
saint
saint
Android WebView addJavascriptInterface Arbitrary Java Method Access
2014-02-11 00:00:00
Android WebView addJavascriptInterface Arbitrary Java Method Access
2014-02-11 00:00:00
Android WebView addJavascriptInterface Arbitrary Java Method Access
2014-02-11 00:00:00
myhack58
myhack58
hackerone
hackerone
ownCloud: Webview Vulnerablity [OwnCloudAndroid Application]
2015-09-07 11:57:09
checkpoint_advisories
checkpoint_advisories
Google Android Denial Of Service (CVE-2013-4710)
2022-05-30 00:00:00
exploitdb
exploitdb
Boat Browser 8.0/8.0.1 - Remote Code Execution
2014-07-16 00:00:00
packetstorm
packetstorm
Boat Browser 8.0 / 8.0.1 Remote Code Execution
2014-07-16 00:00:00
lenovo
lenovo
SHAREit for Android Vulnerabilities
2017-05-08 00:00:00
SHAREit for Android Vulnerabilities - Lenovo Support US
2017-05-08 00:00:00