CVE-2010-4804 The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/andr...
MediumCVSS 4.3
EPSS 27.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | <= 2.3.3 | No fix listed |
| Google Android | = 1.5 | No fix listed |
| Google Android | = 1.6 | No fix listed |
| Google Android | = 2.1 | No fix listed |
| Google Android | = 2.2 | No fix listed |
| Google Android | = 2.2-rev1 | No fix listed |
| Google Android | = 2.2.1 | No fix listed |
| Google Android | = 2.2.2 | No fix listed |
| Google Android | = 2.3-rev1 | No fix listed |