Remote code execution

2020-02-0716:15:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.7%

JSON

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code.

CPENameOperatorVersion
androidlt4.4

CPE	Name	Operator	Version
	android	lt	4.4

References

www.openwall.com/lists/oss-security/2014/10/02/20

daoyuan14.github.io/news/newattackvector.html

exchange.xforce.ibmcloud.com/vulnerabilities/96833

www.securityfocus.com/bid/70222