EUVD-2014-1525

Malware in sbrugna...

Maxthon Cloud Browser application Address Bar Spoofing Vulnerability

Maxthon is a versatile, personalized multi-tab browser based on the IE kernel. An address bar spoofing vulnerability exists in Maxthon Cloud Browser application versions prior to 4.1.6.2000, which allows remote attackers to spoof the address bar via JavaScript code crafted to use API history...

Design/Logic Flaw

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...

CVE-2014-1449

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...

CVE-2014-1449

The Maxthon Cloud Browser for Android (versions before 4.1.6.2000) is affected by an address bar spoofing vulnerability. Malicious JavaScript that uses the history API can cause the address bar to display a forged URL, enabling potential phishing-like deception. The defect is tied to the browser’...

CVE-2014-1449

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...