Sony Playstation Vita Browser 'window.open()' URI Spoofing Vulnerability

Bugtraq ID:	57762
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 06 2013 12:00AM
Updated:	Feb 06 2013 12:00AM
Credit:	David Vieira-Kurz
Vulnerable:
Not Vulnerable:

Sony Playstation Vita Browser 'window.open()' URI Spoofing Vulnerability

Sony Playstation Vita Browser is affected by a URI-spoofing vulnerability.

An attacker may leverage this issue to spoof the source URI of a site presented to an unsuspecting user. This may lead to a false sense of trust because the user may be presented with a source URI of a trusted site while interacting with the attacker's malicious site.

Sony Playstation Vita Browser with firmware 2.05 is vulnerable.

Sony Playstation Vita Browser 'window.open()' URI Spoofing Vulnerability

The following proof of concept code is available:

• /data/vulnerabilities/exploits/57762.html

Sony Playstation Vita Browser 'window.open()' URI Spoofing Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sony Playstation Vita Browser 'window.open()' URI Spoofing Vulnerability

References:

• [MajorSecurity-SA-2013-014]Sony Playstation Vita Browser - firmware 2.05 - Adres (MajorSecurity)
  
• PlayStation - Homepage (Sony)