Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Android 输入验证错误漏洞
Vulnerability Description
Android是美国谷歌(Google)和开放手持设备联盟(简称OHA)的一套以Linux为基础的开源操作系统。 Android 4.4.0之前版本中的WebView.addJavascriptInterface方法存在输入验证错误漏洞。远程攻击者可借助特制JavaScript代码中的Java Reflection API利用该漏洞在系统上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A