PT-2020-7690 · Unknown · Boat Browser

C0Otlass · Published 2020-02-12 · Updated 2020-02-19 · CVE-2014-4968

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Boat Browser application versions 8.0 through 8.0.1

Description The issue allows remote attackers to execute arbitrary code via a crafted web site. This is related to the use of the WebView.addJavascriptInterface method in the WebView class.

Recommendations For Boat Browser application versions 8.0 through 8.0.1, consider disabling the addJavascriptInterface method as a temporary workaround until a patch is available. Restrict access to potentially malicious web sites to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2014-4968

Affected Products

Boat Browser

References · 4

• 🔥 http://exploit-db.com/exploits/34088 · Exploit
• 🔥 https://exploit-db.com/exploits/34088 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4968 · Security Note
• https://t.me/cvenotify/904 · Telegram Post