PT-2014-4338 · Apache+1 · Apache Cordova+1

Martin Georgiev + 2 · Publicado 2014-03-03 · Atualizado 2014-03-03 · CVE-2014-1881

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Cordova versions 3.3.0 and earlier Adobe PhoneGap versions 2.9.0 and earlier

Description The issue allows remote attackers to bypass intended device-resource restrictions of an event-based bridge. This is achieved via a crafted library clone that leverages IFRAME script execution and waits a certain amount of time for an OnJsPrompt handler return value as an alternative to correct synchronization.

Recommendations For Apache Cordova versions 3.3.0 and earlier, consider restricting access to the event-based bridge until a fix is available. For Adobe PhoneGap versions 2.9.0 and earlier, avoid using the OnJsPrompt handler in the affected library clone until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-1881

Produtos afetados

Phonegap

Apache Cordova

Referências · 6

• 🔥 http://cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-1881 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/02/07/9 · Nota
• http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt · Nota
• http://internetsociety.org/ndss2014/programme#session3 · Nota
• http://seclists.org/bugtraq/2014/Jan/96 · Correção