Amazon App Store Multiple Security Vulnerabilities
BID:74401
Info
Amazon App Store Multiple Security Vulnerabilities
| Bugtraq ID: | 74401 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 29 2015 12:00AM |
| Updated: | Apr 29 2015 12:00AM |
| Credit: | MWR Labs |
| Vulnerable: |
Amazon Fire Phone 0 Amazon App Store 0 |
| Not Vulnerable: | |
Discussion
Amazon App Store Multiple Security Vulnerabilities
Amazon App Store is prone to the following security vulnerabilities:
1. A remote code-execution vulnerability
2. A cross-site scripting vulnerability
3. A security-bypass vulnerability
Attackers can exploit these issues to execute arbitrary code in the context of the affected application, to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site to steal cookie-based authentication credentials and to perform unauthorized actions by conducting a man-in-the-middle attack.
Amazon App Store is prone to the following security vulnerabilities:
1. A remote code-execution vulnerability
2. A cross-site scripting vulnerability
3. A security-bypass vulnerability
Attackers can exploit these issues to execute arbitrary code in the context of the affected application, to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site to steal cookie-based authentication credentials and to perform unauthorized actions by conducting a man-in-the-middle attack.
Exploit / POC
Amazon App Store Multiple Security Vulnerabilities
An attacker can exploit this issue using readily available tools. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
An attacker can exploit this issue using readily available tools. To exploit a cross-site scripting issue, an attacker must entice an unsuspecting user to follow a malicious URI.
Solution / Fix
Amazon App Store Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Amazon App Store Multiple Security Vulnerabilities
References:
References: