CVE-2011-2357: Input Validation
Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by (1) causing the MAXTAB number of tabs to be opened, then loading a URI to the targeted domain into the current tab, or (2) making two startActivity function calls beginning with the targeted domain's URI followed by the malicious Javascript while the UI focus is still associated with the targeted domain.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2357?
CVE-2011-2357 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2011-2357?
To fix CVE-2011-2357, update your Android operating system to a version higher than 3.1.
What systems are affected by CVE-2011-2357?
CVE-2011-2357 affects Android versions 2.3.4 and 3.1.
What type of vulnerability is CVE-2011-2357?
CVE-2011-2357 is identified as a cross-application scripting vulnerability.
Can CVE-2011-2357 be exploited remotely?
Yes, CVE-2011-2357 can be exploited by local applications to execute arbitrary JavaScript on targeted domains.