Google Android Same Origin Policy Security Bypass Vulnerability

Bugtraq ID:	70394
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 11 2014 12:00AM
Updated:	Oct 11 2014 12:00AM
Credit:	E Boogie
Vulnerable:	Google Android 4.3.1 Google Android 4.2.2 Google Android 4.1.2 Google Android 4.1.1 Google Android 4.0.4 Google Android 4.0.3 Google Android 4.0.2 Google Android 4.0.1 Google Android 3.2.6 Google Android 3.2.4 Google Android 3.2.2 Google Android 3.2.1 Google Android 2.3.6 Google Android 2.3.5 Google Android 2.2.3 Google Android 4.3 Google Android 4.2 Google Android 4.1 Google Android 4.0 Google Android 3.2 Google Android 3.1 Google Android 3.0 Google Android 2.3.4 Google Android 2.3.3 Google Android 2.3.2 Google Android 2.3.1 Google Android 2.3 Rev1 Google Android 2.3 Google Android 2.2.2 Google Android 2.2.1 Google Android 2.2 Rev1 Google Android 2.2 Google Android 2.1 Google Android 1.6 Google Android 1.5
Not Vulnerable:

Google Android Same Origin Policy Security Bypass Vulnerability

Attackers may use standard tools to exploit this issue. The attacker must entice a user to visit a malicious website.

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/70394.html.txt