CVE-2013-2304

The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.

Score

CVSS 2.0 5.8 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2013-04-16

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Sleipnir Mobile (Fenrir-inc)

References

• http://jvn.jp/en/jp/JVN02895867/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000033