CVE-2014-4968

  • Last update: Apr 13, 2023

Description

The WebView class and use of the WebView.addJavascriptInterface method in the Boat Browser application 8.0 and 8.0.1 for Android allow remote attackers to execute arbitrary code via a crafted web site, a related issue to CVE-2012-6636.

Software From Fixed in
boatmob / boat_browser 8.0 8.0.x
boatmob / boat_browser 8.0.1 8.0.1.x

Details

    • Severity: High
  • CVE: CVE-2014-4968
  • Published: Feb 12, 2020
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P