CVE-2014-1887 The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geol...

MediumCVSS 4.3 EPSS 1.3%

Published: 2014-03-03 04:00
Updated: 2026-06-17 03:05
Exploit status: No public exploit known

Description

The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geolocation information, by leveraging control over one of a number of adult sites, as demonstrated by (1) freelifetimecheating.com and (2) www.babesroulette.com.

Affected products

Product	Affected versions	Fixed in
drinkedin barfinder	All versions	No fix listed

References

[oss-security] 20140207 Re: CVE request: multiple issues in Apache Cordova/PhoneGap mailing-list
www.cs.utexas.edu exploit
www.internetsociety.org

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.33% (percentile 71.5)
CWE: CWE-264

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.