CVE-2014-1939

java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl…

published March 3, 2014

CVSS
—
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01121 · 65.7th percentile
Published
2014-03-03T02:00Z
EPSS history
Timeline
  • 03 MAR 02:00Z
    java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl…
    cvelistv5