CVE-2014-7224

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.0

Description A Code Execution issue exists related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects. This could let a remote malicious user execute arbitrary code.

Recommendations For Android versions prior to 4.4.0, consider restricting the use of the addJavascriptInterface method until a patch is available. As a temporary workaround, limit the accessibility features to minimize the risk of exploitation.