CVE-2014-1939 in Google Android
Summary
java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
02/10/2014
Disclosure
03/02/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12292 | Google Android Javascript Bridge SearchBoxImpl.java code injection | 94 | Unproven | Official fix | CVE-2014-1939 |