googlechromereleases.blogspot.comConfirmation
http://googlechromereleases.blogspot.com/2012/09/chrome-for-android-update.html CVE-2012-4908
Google Chrome for Android - Same-origin Policy Bypass Local Symlink
Record summary
CVE-2012-4908 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGoogle Chrome for Android - Same-origin Policy Bypass Local SymlinkExploitDB exploitby Artem ChaykinNot analyzed1 file
References
3code.google.comConfirmation
https://code.google.com/p/chromium/issues/detail?id=144866 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-4908