CVE-2012-4004: XSS
Cross-site scripting (XSS) vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allows remote attackers to inject arbitrary web script or HTML via a crafted application that interacts with an unspecified Sleipnir Mobile function.
Affected Software
Event History
Frequently Asked Questions
Which installations are affected?
Sleipnir Mobile for Android 2.2.0 and earlier, and Sleipnir Mobile Black Edition for Android 2.2.0 and earlier, are affected.
What does an attacker need to exploit this issue?
An attacker needs to provide a crafted Android application that interacts with an unspecified Sleipnir Mobile function. The vulnerability can be exploited remotely and does not require authentication.
What could exploitation allow?
A successful exploit allows injection of arbitrary web script or HTML. The provided impact information indicates integrity impact, with no stated confidentiality or availability impact.