CVE-2016-1155 in Android
Summary
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
12/26/2015
Disclosure
04/13/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 99812 | Google Android HTTP Header URLConnection injection | 74 | Not defined | Official fix | CVE-2016-1155 |