PT-2014-7019 · Google · Android Browser+1

Joev + 1 · Published 2014-09-02 · Updated 2017-09-08 · CVE-2014-6041

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4

Description The issue allows remote attackers to bypass the Same Origin Policy. This can be achieved via a crafted attribute containing a u0000 character. For example, an onclick attribute with a window.open sequence can be used to demonstrate this issue in the Android Browser application or a third-party web browser.

Recommendations For Android versions prior to 4.4, update to version 4.4 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-6041

Affected Products

Android

Android Browser

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/android/google_play_store_uxss_xframe_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/android_stock_browser_uxss.rb · Exploit
• 🔥 http://rafayhackingarticles.net/2014/08/android-browser-same-origin-policy.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-6041 · Security Note
• https://community.rapid7.com/community/metasploit/blog/2014/09/15/major-android-bug-is-a-privacy-disaster-cve-2014-6041 · Note
• https://news.ycombinator.com/item?id=8325807 · Note
• https://news.ycombinator.com/item?id=8321185 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95693 · Note
• http://securityfocus.com/bid/69548 · Note
• https://android.googlesource.com/platform/external/webkit/+/7e4405a7a12750ee27325f065b9825c25b40598c · Note
• https://android.googlesource.com/platform/external/webkit/+/1368e05e8875f00e8d2529fe6050d08b55ea4d87 · Note