CVE-2014-1885 The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain write access to external-st...
MediumCVSS 6.4
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain write access to external-storage resources, by leveraging control over any Google syndication advertising domain.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hsgroup forzearmate | All versions | No fix listed |