CVE-2013-2304: Medium severity Fenrir-inc Sleipnir Mobile vulnerability

Published Apr 16, 2013
·
Updated

The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.

Affected Software

61 affected components
Fenrir-inc Sleipnir Mobile<=2.8.0
Fenrir-inc Sleipnir Mobile=1.0.0-alpha
Fenrir-inc Sleipnir Mobile=1.0.0-beta_update1
Fenrir-inc Sleipnir Mobile=1.0.0-rc
Fenrir-inc Sleipnir Mobile=1.1.0
Fenrir-inc Sleipnir Mobile=1.2.0
Fenrir-inc Sleipnir Mobile=1.3.0
Fenrir-inc Sleipnir Mobile=1.4.0
Fenrir-inc Sleipnir Mobile=1.5.0
Fenrir-inc Sleipnir Mobile=1.5.1
Fenrir-inc Sleipnir Mobile=1.6.0
Fenrir-inc Sleipnir Mobile=1.7.0
Fenrir-inc Sleipnir Mobile=1.7.1
Fenrir-inc Sleipnir Mobile=2.0.0
Fenrir-inc Sleipnir Mobile=2.0.1
Fenrir-inc Sleipnir Mobile=2.0.2
Fenrir-inc Sleipnir Mobile=2.0.3
Fenrir-inc Sleipnir Mobile=2.0.4
Fenrir-inc Sleipnir Mobile=2.1.0
Fenrir-inc Sleipnir Mobile=2.2.0
Fenrir-inc Sleipnir Mobile=2.2.1
Fenrir-inc Sleipnir Mobile=2.2.2
Fenrir-inc Sleipnir Mobile=2.2.3
Fenrir-inc Sleipnir Mobile=2.3.0
Fenrir-inc Sleipnir Mobile=2.4.0
Fenrir-inc Sleipnir Mobile=2.4.1
Fenrir-inc Sleipnir Mobile=2.5.0
Fenrir-inc Sleipnir Mobile=2.5.1
Fenrir-inc Sleipnir Mobile=2.6.0
Fenrir-inc Sleipnir Mobile=2.7.0
Google Android
Fenrir-inc Sleipnir Mobile<=2.8.0
Fenrir-inc Sleipnir Mobile=1.0.0-alpha
Fenrir-inc Sleipnir Mobile=1.0.0-beta_update1
Fenrir-inc Sleipnir Mobile=1.0.0-rc
Fenrir-inc Sleipnir Mobile=1.1.0
Fenrir-inc Sleipnir Mobile=1.2.0
Fenrir-inc Sleipnir Mobile=1.3.0
Fenrir-inc Sleipnir Mobile=1.4.0
Fenrir-inc Sleipnir Mobile=1.5.0
Fenrir-inc Sleipnir Mobile=1.5.1
Fenrir-inc Sleipnir Mobile=1.6.0
Fenrir-inc Sleipnir Mobile=1.7.0
Fenrir-inc Sleipnir Mobile=1.7.1
Fenrir-inc Sleipnir Mobile=2.0.0
Fenrir-inc Sleipnir Mobile=2.0.1
Fenrir-inc Sleipnir Mobile=2.0.2
Fenrir-inc Sleipnir Mobile=2.0.3
Fenrir-inc Sleipnir Mobile=2.0.4
Fenrir-inc Sleipnir Mobile=2.1.0
Fenrir-inc Sleipnir Mobile=2.2.0
Fenrir-inc Sleipnir Mobile=2.2.1
Fenrir-inc Sleipnir Mobile=2.2.2
Fenrir-inc Sleipnir Mobile=2.2.3
Fenrir-inc Sleipnir Mobile=2.3.0
Fenrir-inc Sleipnir Mobile=2.4.0
Fenrir-inc Sleipnir Mobile=2.4.1
Fenrir-inc Sleipnir Mobile=2.5.0
Fenrir-inc Sleipnir Mobile=2.5.1
Fenrir-inc Sleipnir Mobile=2.6.0
Fenrir-inc Sleipnir Mobile=2.7.0

Event History

Apr 16, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2013-2304?

CVE-2013-2304 is classified as a moderate vulnerability due to its potential for exploitation by remote attackers.

2

How can I fix CVE-2013-2304?

To mitigate CVE-2013-2304, users should upgrade their Sleipnir Mobile application to version 2.9.0 or later.

3

What are the affected versions of CVE-2013-2304?

CVE-2013-2304 affects Sleipnir Mobile versions up to and including 2.8.0.

4

What type of vulnerability is CVE-2013-2304?

CVE-2013-2304 is a remote code execution vulnerability that allows attackers to load arbitrary Extension APIs.

5

Who is impacted by CVE-2013-2304?

Users of the Sleipnir Mobile application on Android devices, particularly those using versions 2.8.0 and earlier, are impacted by CVE-2013-2304.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203