Sleipnir Mobile for Android CVE-2013-2304 Access Security Bypass Vulnerability

Bugtraq ID:	59046
Class:	Design Error
CVE:	CVE-2013-2304
Remote:	Yes
Local:	No
Published:	Apr 12 2013 12:00AM
Updated:	Apr 12 2013 12:00AM
Credit:	Keita Haga of keitahaga.com
Vulnerable:
Not Vulnerable:

Sleipnir Mobile for Android CVE-2013-2304 Access Security Bypass Vulnerability

Sleipnir is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

Sleipnir versions 2.8.0 and prior are vulnerable.

Sleipnir Mobile for Android CVE-2013-2304 Access Security Bypass Vulnerability

Attackers can exploit this issue by enticing a user to visit a malicious URI.

Sleipnir Mobile for Android CVE-2013-2304 Access Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Sleipnir Mobile for Android CVE-2013-2304 Access Security Bypass Vulnerability

References:

• Fenrir Homepage (Fenrir)
  
• Sleipnir Mobile for Android loads arbitrary Extension API (JPCERT)
  
• Sleipnir Mobile for Android loads arbitrary Extension API (JPCERT)