Vulnerability Description
Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an unspecified impact via a crafted web page.
CVSS Score
9.3
HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome | <= 18.0.1025306 | |
| Android | All versions |
Related Weaknesses (CWE)
References
- http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.htmlVendor Advisory
- https://code.google.com/p/chromium/issues/detail?id=137532
- http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.htmlVendor Advisory
- https://code.google.com/p/chromium/issues/detail?id=137532
FAQ
What is CVE-2012-4907?
CVE-2012-4907 is a vulnerability with a CVSS score of 9.3 (HIGH). Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an unspecified impact via a crafted web page.
How severe is CVE-2012-4907?
CVE-2012-4907 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4907?
Check the references section above for vendor advisories and patch information. Affected products include: Google Chrome, Google Android.