PT-2020-7731
CVE-2014-7224
·
تاريخ النشر
2020-02-07
·
تاريخ التحديث
2020-02-12
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions prior to 4.4.0
Description
A Code Execution issue exists related to the
addJavascriptInterface method and the accessibility and accessibilityTraversal objects. This could let a remote malicious user execute arbitrary code.Recommendations
For Android versions prior to 4.4.0, consider restricting the use of the
addJavascriptInterface method until a patch is available. As a temporary workaround, limit the accessibility features to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾