QwikSec

Security Database

CVE

CWE

Training

CVE-2014-1939

Published: Mar 3, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows attackers to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interface at certain Android API levels.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://blog.chromium.org/2013/11/introducing-chromium-powered-android.html

x_refsource_CONFIRM

[oss-security] 20140210 CVE-2014-1939 searchBoxJavaBridge_ in Android Jelly Bean

mailing-list

x_refsource_MLIST

https://support.lenovo.com/us/en/product_security/len_6421

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.