NVD

Id
16042  
Name
CVE-2010-4804  
Description
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2011-06-09  
Modified Date
2011-10-26  
Seq
2010-4804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90711 16042 CVE-2010-4804 http://android.git.kernel.org/?p=platform/frameworks/base.git;a=commit;h=f440831d76817e837164ca18c7705e81d2391f87  View
90712 16042 CVE-2010-4804 http://android.git.kernel.org/?p=platform/packages/apps/Browser.git;a=commit;h=604a598e1e01bda781600a45e0a971898a582666  View
90713 16042 CVE-2010-4804 http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability/  View
90714 16042 CVE-2010-4804 http://www.csc.ncsu.edu/faculty/jiang/nexuss.html  View
90715 16042 CVE-2010-4804 48256  View
90716 16042 CVE-2010-4804 http://www.slashgear.com/android-data-theft-exploit-to-be-plugged-in-gingerbread-video-24116054/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31479 JVNDB-2011-001719 Android の Android ブラウザにおける SD カード上の情報を取得される脆弱性 Android の Android ブラウザは、com/android/browser/SD 内の BrowserActivity.java および BrowserSettings.java に関する処理に不備があるため、SD カード上の情報を取得される脆弱性が存在します。 CVE-2010-4804 47384 CVE-2010-4804 16042 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001719.html 2011-06-09 2011-06-21 View