(Mobile Pwn2Own) Amazon App Store JavaScript Bridge Remote Code Execution Vulnerability
April 29th, 2015
Vulnerability Details
This vulnerability allows remote attackers to execute arbitrary code on Amazon Fire Phone. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the methods that were exposed to the WebView. The IntentBridge class wraps IPC functions that allows an attacker to download and install a malicious application. A remote attacker can abuse this achieve remote code execution under the context of the process.
Additional Details
There was not an advisory posted and no patch required, the issue was fixed server side.
Disclosure Timeline
- 2014-11-12 - Vulnerability reported to vendor
- 2015-04-29 - Coordinated public release of advisory
Credit
MWR Labs
