CVE-2014-1939 | BDVDB-2026-60177 Detail

Description#

java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://blog.chromium.org/2013/11/introducing-chromium-powered-android.html
http://openwall.com/lists/oss-security/2014/02/11/2
https://support.lenovo.com/us/en/product_security/len_6421

Exploit#

No public exploit known

History#

Version 12014-03-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.