CVE-2014-1670 The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response.
MediumCVSS 6.8
EPSS 13.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft bing | <= 4.2.0 | No fix listed |
References
- blog.trustlook.com exploit
- 102575 vdb-entry
- 65128 vdb-entry
- www.youtube.com exploit
- ms-bing-cve20141670-code-exec(90977) vdb-entry
- play.google.com