PT-2014-4374
CVE-2014-1939
·
تاريخ النشر
2014-03-03
·
تاريخ التحديث
2016-05-26
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Android versions prior to 4.4
Description
The issue allows attackers to execute arbitrary Java code by leveraging access to the
searchBoxJavaBridge interface at certain Android API levels. This is due to the use of the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class in java/android/webkit/BrowserFrame.java.Recommendations
For Android versions prior to 4.4, as a temporary workaround, consider restricting access to the
searchBoxJavaBridge interface until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾