NVD

Id
9149  
Name
CVE-2011-2357  
Description
Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by (1) causing the MAX_TAB number of tabs to be opened, then loading a URI to the targeted domain into the current tab, or (2) making two startActivity function calls beginning with the targeted domain"s URI followed by the malicious Javascript while the UI focus is still associated with the targeted domain.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-08-12  
Modified Date
2011-09-21  
Seq
2011-2357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
52204 9149 CVE-2011-2357 http://android.git.kernel.org/?p=platform/cts.git;a=commit;h=7e48fb87d48d27e65942b53b7918288c8d740e17  View
52205 9149 CVE-2011-2357 http://android.git.kernel.org/?p=platform/packages/apps/Browser.git;%20a=commit;h=096bae248453abe83cbb2e5a2c744bd62cdb620b  View
52206 9149 CVE-2011-2357 http://android.git.kernel.org/?p=platform/packages/apps/Browser.git;%20a=commit;h=afa4ab1e4c1d645e34bd408ce04cadfd2e5dae1e  View
52207 9149 CVE-2011-2357 http://blog.watchfire.com/files/advisory-android-browser.pdf  View
52208 9149 CVE-2011-2357 http://blog.watchfire.com/wfblog/2011/08/android-browser-cross-application-scripting-cve-2011-2357.html  View
52209 9149 CVE-2011-2357 20110802 Android Browser Cross-Application Scripting (CVE-2011-2357)  View
52210 9149 CVE-2011-2357 8335  View
52211 9149 CVE-2011-2357 1025881  View
52212 9149 CVE-2011-2357 http://www.infsec.cs.uni-saarland.de/projects/android-vuln/  View
52213 9149 CVE-2011-2357 http://www.infsec.cs.uni-saarland.de/projects/android-vuln/android_xss.pdf  View
52214 9149 CVE-2011-2357 20110802 Android Browser Cross-Application Scripting (CVE-2011-2357)  View
52215 9149 CVE-2011-2357 48954  View
52216 9149 CVE-2011-2357 android-sandbox-cas(68937)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32739 JVNDB-2011-002979 Android におけるクロスアプリケーションスクリプティングの脆弱性 Android のブラウザが URL を読み込む機能には、クロスアプリケーションスクリプティングの脆弱性が存在します。 CVE-2011-2357 50264 CVE-2011-2357 9149 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002979.html 2011-08-12 2011-11-21 View