CVE-2014-1449

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-12-25

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Maxthon Cloud Browser (Maxthon)

References

• http://browser-shredders.blogspot.com/2014/01/cve-2014-1449-maxthon-cloud-browser-for.html
• http://www.maxthon.com/android/changelog/