CVE-2010-4804 PoC — Android浏览器信息泄露漏洞

Source

https://github.com/thomascannon/android-cve-2010-4804

Associated Vulnerability

Title:Android浏览器信息泄露漏洞 (CVE-2010-4804)
Description:Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。 Android 2.3.4之前版本的Android浏览器中存在信息泄露漏洞。该漏洞是由于com/android/browser/下的BrowserActivity.java和BrowserSettings.java中的错误导致的，远程攻击者可以借助特制的content:// URI获取SD卡内容。

Description

Android Data Stealing Vulnerability

Readme

Proof of Concept for Android Data Stealing Vulnerability.

[CVE-2010-4804](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4804)

[Original advisory](http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability/)

File Snapshot


 [4.0K]  /data/pocs/8395e351863b84c5ae439e25fd5fa34f53f53861
├── [5.4K]  poc2.php
├── [4.7K]  poc.php
└── [ 234]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!