CVE-2014-7224

A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-02-07

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Android (Google)

References

• http://www.openwall.com/lists/oss-security/2014/10/02/20
• https://daoyuan14.github.io/news/newattackvector.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96833
• https://www.securityfocus.com/bid/70222