mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
98 lines
3.4 KiB
JSON
98 lines
3.4 KiB
JSON
{
|
|
"CVE_data_meta" : {
|
|
"ASSIGNER" : "cve@mitre.org",
|
|
"ID" : "CVE-2014-6041",
|
|
"STATE" : "PUBLIC"
|
|
},
|
|
"affects" : {
|
|
"vendor" : {
|
|
"vendor_data" : [
|
|
{
|
|
"product" : {
|
|
"product_data" : [
|
|
{
|
|
"product_name" : "n/a",
|
|
"version" : {
|
|
"version_data" : [
|
|
{
|
|
"version_value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format" : "MITRE",
|
|
"data_type" : "CVE",
|
|
"data_version" : "4.0",
|
|
"description" : {
|
|
"description_data" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \\u0000 character, as demonstrated by an onclick=\"window.open('\\u0000javascript: sequence to the Android Browser application 4.2.1 or a third-party web browser."
|
|
}
|
|
]
|
|
},
|
|
"problemtype" : {
|
|
"problemtype_data" : [
|
|
{
|
|
"description" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references" : {
|
|
"reference_data" : [
|
|
{
|
|
"name" : "http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html",
|
|
"refsource" : "MISC",
|
|
"url" : "http://www.rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html"
|
|
},
|
|
{
|
|
"name" : "https://community.rapid7.com/community/metasploit/blog/2014/09/15/major-android-bug-is-a-privacy-disaster-cve-2014-6041",
|
|
"refsource" : "MISC",
|
|
"url" : "https://community.rapid7.com/community/metasploit/blog/2014/09/15/major-android-bug-is-a-privacy-disaster-cve-2014-6041"
|
|
},
|
|
{
|
|
"name" : "https://news.ycombinator.com/item?id=8321185",
|
|
"refsource" : "MISC",
|
|
"url" : "https://news.ycombinator.com/item?id=8321185"
|
|
},
|
|
{
|
|
"name" : "https://android.googlesource.com/platform/external/webkit/+/1368e05e8875f00e8d2529fe6050d08b55ea4d87",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://android.googlesource.com/platform/external/webkit/+/1368e05e8875f00e8d2529fe6050d08b55ea4d87"
|
|
},
|
|
{
|
|
"name" : "https://android.googlesource.com/platform/external/webkit/+/7e4405a7a12750ee27325f065b9825c25b40598c",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://android.googlesource.com/platform/external/webkit/+/7e4405a7a12750ee27325f065b9825c25b40598c"
|
|
},
|
|
{
|
|
"name" : "https://news.ycombinator.com/item?id=8325807",
|
|
"refsource" : "CONFIRM",
|
|
"url" : "https://news.ycombinator.com/item?id=8325807"
|
|
},
|
|
{
|
|
"name" : "69548",
|
|
"refsource" : "BID",
|
|
"url" : "http://www.securityfocus.com/bid/69548"
|
|
},
|
|
{
|
|
"name" : "google-android-cve20146041-sec-bypass(95693)",
|
|
"refsource" : "XF",
|
|
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/95693"
|
|
}
|
|
]
|
|
}
|
|
}
|