CVE ID | |
CVSS SCORE | 6.8, AV:N/AC:M/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Amazon |
AFFECTED PRODUCTS |
App Store |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['17034']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The specific flaw exists within the methods that were exposed to the WebView. The IntentBridge class wraps IPC functions that allows an attacker to download and install a malicious application. A remote attacker can abuse this achieve remote code execution under the context of the process.
|
ADDITIONAL DETAILS |
|
DISCLOSURE TIMELINE |
|
CREDIT | MWR Labs |