HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 up to and including 6.0 allows remote malicious users to execute arbitrary scripts or set arbitrary values in cookies.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
google android 2.2 |
||
google android 2.2.1 |
||
google android 2.2.2 |
||
google android 2.2.3 |
||
google android 3.2.1 |
||
google android 3.2.2 |
||
google android 3.2.4 |
||
google android 3.2.6 |
||
google android 4.4.1 |
||
google android 4.4.2 |
||
google android 4.4.3 |
||
google android 4.4.4 |
||
google android 2.3.3 |
||
google android 2.3.4 |
||
google android 2.3.5 |
||
google android 2.3.6 |
||
google android 4.0.4 |
||
google android 4.1 |
||
google android 4.1.2 |
||
google android 4.2 |
||
google android 4.2.1 |
||
google android 5.1.0 |
||
google android 5.1.1 |
||
google android 6.0 |
||
google android 2.3 |
||
google android 2.3.1 |
||
google android 3.0 |
||
google android 3.2 |
||
google android 4.0 |
||
google android 4.0.2 |
||
google android 4.2.2 |
||
google android 4.3.1 |
||
google android 5.0.1 |
||
google android 5.1 |
||
google android 2.3.2 |
||
google android 2.3.7 |
||
google android 3.1 |
||
google android 4.0.1 |
||
google android 4.0.3 |
||
google android 4.3 |
||
google android 4.4 |
||
google android 5.0 |
||
google android 5.0.2 |
Vulmon