CVE-2010-4804 PoC — Android浏览器信息泄露漏洞

Source

https://github.com/thomascannon/android-cve-2010-4804

Associated Vulnerability

Title: Android浏览器信息泄露漏洞 (CVE-2010-4804)
Description:The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.

Description

Android Data Stealing Vulnerability

Readme

Proof of Concept for Android Data Stealing Vulnerability.

[CVE-2010-4804](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4804)

[Original advisory](http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability/)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →