Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-4906. PoCs published by Artem Chaykin.
AI-analyzed exploit summary This exploit leverages an information disclosure vulnerability in Google Chrome for Android to steal cookie-based authentication credentials by tricking the browser into saving its Cookies file to an accessible directory. The PoC uses an Intent to trigger the vulnerability and reads the exposed file.
Description
Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4903.
Exploits (1)
This exploit leverages an information disclosure vulnerability in Google Chrome for Android to steal cookie-based authentication credentials by tricking the browser into saving its Cookies file to an accessible directory. The PoC uses an Intent to trigger the vulnerability and reads the exposed file.