Snip3R69/CVE-2013-4710-WebView-RCE-Vulnerability

PoC

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.

Exploit ansehen Quelle poc_in_githubAutor Snip3R69veröffentlicht 2022-05-11Katalog poc_in_github

ausgenutzte CVEs (2)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2013-4710US	high9.3	43.4% (99th)	Exploit	2014-03-03
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to e…
CVE-2012-6636US	medium6.8	38.5% (99th)	Exploit	2014-03-03
The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using…

scry

Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan