VDB
CVE-2013-4710
CVE-2013-4710
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.
EPSS 42.62% · 98.6th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
42.62%
98.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| android | 3.2.2, 4.0, 3.2.6 |
Timeline
- Dec 21, 2012 PoC Published
- Mar 3, 2014 CVE Published
- Oct 11, 2015 PoC Published
- Mar 23, 2017 PoC Published
- May 29, 2018 PoC Published
- Feb 4, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Aug 14, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- May 8, 2023 EPSS Score
References
- http://jvn.jp/en/jp/JVN53768697/113349/index.html url
- JVN#53768697 third-party-advisory
- http://jvn.jp/en/jp/JVN53768697/397327/index.html url
- [oss-security] 20140218 Re: CVE-2014-1939 searchBoxJavaBridge_ in Android Jelly Bean mailing-list
- http://jvn.jp/en/jp/JVN53768697/995293/index.html url
- JVNDB-2013-000111 third-party-advisory
- http://emobile.jp/products/sh/a01sh/systemsoftware.html url
- http://jvn.jp/en/jp/JVN53768697/995312/index.html url
- http://jvn.jp/en/jp/JVN53768697/995417/index.html url
- http://50.56.33.56/blog/?p=314 url
- https://nvd.nist.gov/vuln/detail/CVE-2013-4710 advisory