Home > Vulnerability Database > CVE-2013-4710

WhiteSource Vulnerability Database

CVE-2013-4710

Good to know:

Date: March 2, 2014

Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.

Language: Java

Severity Score

9.3

Related Resources (5)

Url: http://jvn.jp/en/jp/JVN53768697/113349/index.html

Url: http://jvn.jp/en/jp/JVN53768697/index.html

Url: http://jvn.jp/en/jp/JVN53768697/995293/index.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-4710

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2013-4710

Severity Score

9.3

Weakness Type (CWE)

Input Validation

CWE-20

Top Fix

Upgrade Version

Upgrade to version com.google.android:android:4.2.0

Learn More

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2013-4710

Good to know:

Date: March 2, 2014

Language: Java

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?