CVE-2014-1449 The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxthon cloud browser | <= 4.1.5.2000 | No fix listed |
References
- browser-shredders.blogspot.com exploit
- www.maxthon.com vendor-advisory