CVE-2014-1884 Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict navigation events, which allows remote attackers to bypass intended device-resou...
HighCVSS 7.5
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict navigation events, which allows remote attackers to bypass intended device-resource restrictions via content that is accessed (1) in an IFRAME element or (2) with the XMLHttpRequest method by a crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache cordova | <= 3.3.0 | No fix listed |
| apache cordova | = 3.0.0 | No fix listed |
| apache cordova | = 3.0.0-rc1 | No fix listed |
| apache cordova | = 3.1.0 | No fix listed |
| apache cordova | = 3.1.0-rc1 | No fix listed |
| apache cordova | = 3.2.0 | No fix listed |
| apache cordova | = 3.2.0-rc1 | No fix listed |
| apache cordova | = 3.3.0-rc1 | No fix listed |
| Adobe phonegap | <= 2.9.0 | No fix listed |
| Adobe phonegap | = 2.0.0 | No fix listed |
| Adobe phonegap | = 2.0.0-rc1 | No fix listed |
| Adobe phonegap | = 2.1.0 | No fix listed |
| Adobe phonegap | = 2.2.0 | No fix listed |
| Adobe phonegap | = 2.2.0-rc1 | No fix listed |
| Adobe phonegap | = 2.2.0-rc2 | No fix listed |
| Adobe phonegap | = 2.3.0 | No fix listed |
| Adobe phonegap | = 2.3.0-rc1 | No fix listed |
| Adobe phonegap | = 2.3.0-rc2 | No fix listed |
| Adobe phonegap | = 2.4.0 | No fix listed |
| Adobe phonegap | = 2.4.0-rc1 | No fix listed |
| Adobe phonegap | = 2.5.0 | No fix listed |
| Adobe phonegap | = 2.5.0-rc1 | No fix listed |
| Adobe phonegap | = 2.6.0 | No fix listed |
| Adobe phonegap | = 2.6.0-rc1 | No fix listed |
| Adobe phonegap | = 2.7.0 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe phonegap | = 2.7.0-rc1 | No fix listed |
| Adobe phonegap | = 2.8.0 | No fix listed |
| Adobe phonegap | = 2.8.1 | No fix listed |
| Adobe phonegap | = 2.9.0-rc1 | No fix listed |
References
- [oss-security] 20140207 Re: CVE request: multiple issues in Apache Cordova/PhoneGap mailing-list
- packetstormsecurity.com
- 20140124 Security Vulnerabilities in Apache Cordova / PhoneGap mailing-list vendor-advisory
- www.cs.utexas.edu exploit
- www.internetsociety.org