CVE-2012-6636: CVE-2012-6636

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2012-6636

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection API within crafted JavaScript code that is loaded into the WebView component in an application targeted to API level 16 or earlier, a related issue to CVE-2013-4710.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Android API 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Android API是美国谷歌（Google）公司的一个用于Android系统中的应用程序编程接口，它包含了一些预先定义的函数，为应用程序和开发人员提供基于某软件或硬件访问一组例程的能力。 Android API 16.0及之前的版本中存在安全漏洞，该漏洞源于程序没有正确限制使用WebView.addJavascriptInterface方法。远程攻击者可通过使用Java Reflection API利用该漏洞执行任意Java对象的方法。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2012-6636

#	POC Description	Source Link	Shenlong Link
1	An app demo for test android webview security issue: CVE-2012-6636	https://github.com/xckevin/AndroidWebviewInjectDemo	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2012-6636

Please Login to view more intelligence information

🔗 http://developer.android.com/reference/android/webkit/WebView.html#addJavascriptInterface%28java.lang.Object%2C%20java.lang.String%29x_refsource_CONFIRM
🔗 https://support.lenovo.com/us/en/product_security/len_6421x_refsource_CONFIRM
🔗 http://www.internetsociety.org/ndss2014/programme#session3x_refsource_MISC
🔗 http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdfx_refsource_MISC
🔗 http://developer.android.com/reference/android/os/Build.VERSION_CODES.html#JELLY_BEAN_MR1x_refsource_CONFIRM
🔗 http://50.56.33.56/blog/?p=314x_refsource_MISC
🔗 http://jvn.jp/en/jp/JVN62161191/index.htmlthird-party-advisoryx_refsource_JVN
🔗 http://openwall.com/lists/oss-security/2014/02/07/9mailing-listx_refsource_MLIST
https://nvd.nist.gov/vuln/detail/CVE-2012-6636

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2012-6636

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2012-6636

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2012-6636

III. Intelligence Information for CVE-2012-6636

IV. Related Vulnerabilities

V. Comments for CVE-2012-6636

Leave a comment