Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google android 4.2.1 vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2014-6041
The Android WebView in Android prior to 4.4 allows remote malicious users to bypass the Same Origin Policy via a crafted attribute containing a \u0000 character, as demonstrated by an onclick="window.open('\u0000javascript: sequence to the Android Browser application 4....
Google Android Browser 4.2.1
8.8
CVSSv2
CVE-2013-6271
Android 4.0 up to and including 4.3 allows malicious users to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.android.settings.ChooseLockGeneric class with the PASSWORD_QUALITY_UN...
Google Android 4.2.1Google Android 4.0Google Android 4.2Google Android 4.0.2Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.3Google Android 4.2.2Google Android 4.0.1Google Android 4.1.2
7.5
CVSSv2
CVE-2014-1939
java/android/webkit/BrowserFrame.java in Android prior to 4.4 uses the addJavascriptInterface API in conjunction with creating an object of the SearchBoxImpl class, which allows malicious users to execute arbitrary Java code by leveraging access to the searchBoxJavaBridge_ interf...
Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0Google AndroidGoogle Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 4.2Google Android 4.1Google Android 4.1.2Google Android 4.0.4Lenovo Shareit
5
CVSSv2
CVE-2013-7372
The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache Harmony up to and including 6.0M3, as used in the Java Cryptography Architecture ...
Google Android 4.0Apache HarmonyGoogle Android 4.3Google Android 4.0.3Google Android 4.0.1Google Android 4.2.2Google Android 4.2.1Google Android 4.2Google Android 4.1.2Google Android 4.1Google AndroidGoogle Android 4.0.4Google Android 4.0.2
7.1
CVSSv2
CVE-2016-3818
libc in Android 4.x prior to 4.4.4 allows remote malicious users to cause a denial of service (device hang or reboot) via a crafted file, aka internal bug 28740702.
Google Android 4.4.2Google Android 4.4Google Android 4.2Google Android 4.1Google Android 4.4.3Google Android 4.4.1Google Android 4.1.2Google Android 4.0.4Google Android 4.3.1Google Android 4.3Google Android 4.2.2Google Android 4.2.1Google Android 4.0.3Google Android 4.0.2Google Android 4.0.1Google Android 4.0
5
CVSSv2
CVE-2016-3753
mediaserver in Android 4.x prior to 4.4.4 allows remote malicious users to obtain sensitive information via unspecified vectors, aka internal bug 27210135.
Google Android 4.4.3Google Android 4.2.1Google Android 4.1.2Google Android 4.0.1Google Android 4.1Google Android 4.0.4Google Android 4.0.3Google Android 4.0.2Google Android 4.4.1Google Android 4.4Google Android 4.3.1Google Android 4.3Google Android 4.4.2Google Android 4.2.2Google Android 4.2Google Android 4.0
7.1
CVSSv2
CVE-2016-6767
A denial of service vulnerability in Mediaserver could enable an malicious user to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4. Android ID: A-31833...
Google Android 4.0.3Google Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.0Google Android 4.0.2Google Android 4.2.2Google Android 4.3.1Google Android 4.4.4Google Android 4.0.1Google Android 4.2.1Google Android 4.3
7.2
CVSSv2
CVE-2014-8609
The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Android prior to 5.0.0 does not properly create a PendingIntent, which allows malicious users to use the SYSTEM uid for broadcasting an intent with arbitrary componen...
Google Android 4.4Google Android 4.4.1Google Android 4.4.2Google Android 4.4.3Google Android 4.0Google Android 4.0.2Google Android 4.2.2Google Android 4.3.1Google AndroidGoogle Android 4.0.4Google Android 4.1Google Android 4.1.2Google Android 4.2Google Android 4.0.1Google Android 4.0.3Google Android 4.2.1Google Android 4.3
10
CVSSv2
CVE-2014-7921
mediaserver in Android 4.0.3 up to and including 5.x prior to 5.1 allows malicious users to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920.
Google Android 4.2Google Android 4.1Google Android 5.0.2Google Android 4.4.3Google Android 4.0.4Google Android 4.3Google Android 4.4.4Google Android 4.2.1Google Android 5.0.1Google Android 5.0Google Android 4.0.3Google Android 4.4Google Android 4.4.1Google Android 4.2.2Google Android 4.3.1Google Android 4.4.2Google Android 4.1.2
9.3
CVSSv2
CVE-2016-2479
The mm-video-v4l2 vdec component in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-06-01 mishandles a buffer count, which allows malicious users to gain privileges via a crafted application, as demonstrated by obtainin...
Google Android 6.0Google Android 5.1Google Android 5.0.1Google Android 5.0Google Android 4.0Google Android 4.2Google Android 4.1.2Google Android 4.1.1Google Android 4.1Google Android 6.0.1Google Android 4.3.1Google Android 4.2.2Google Android 4.0.3Google Android 4.0.1Google Android 4.3Google Android 4.2.1Google Android 4.0.4Google Android 4.0.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook