CVE-2010-4804
Published Jun 9, 2011
Last updated a year ago
Overview
- Description
- The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E81C74BA-5E1C-402B-9124-9D9193C9C801",
"versionEndIncluding": "2.3.3"
},
{
"criteria": "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C354829-6BEB-4C67-972A-60367073753C"
},
{
"criteria": "cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "702B40EB-76BC-4686-A46E-D02DBE3A86E7"
},
{
"criteria": "cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A33DBF65-09A6-4149-BABE-2FFFBF10C31D"
},
{
"criteria": "cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78B69434-13B2-4A43-AEB0-55E0ED403E54"
},
{
"criteria": "cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1755B91-1B6B-4A9E-BB6B-22B399A6DD02"
},
{
"criteria": "cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A92E88F-CCED-41D7-AFB7-CE1F9265E546"
},
{
"criteria": "cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D13D3A00-27A0-4635-9D50-05CA81950691"
},
{
"criteria": "cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61D64B87-F1F1-4E52-86AE-F28E2C43A9A8"
}
],
"operator": "OR"
}
]
}
]