CVE-2013-2317: Medium severity sleipnir mobile vulnerability
Published Jun 3, 2013
·Updated
The Sleipnir Mobile application 2.9.1 and earlier and Sleipnir Mobile Black Edition application 2.9.1 and earlier for Android allow remote attackers to spoof the address bar via vectors involving the opening of a new window.
Affected Software
64 affected components
Fenrir-inc Sleipnir Mobile<=2.9.1
Fenrir-inc Sleipnir Mobile=1.0.0-alpha
Fenrir-inc Sleipnir Mobile=1.0.0-beta_update1
Fenrir-inc Sleipnir Mobile=1.0.0-rc
Fenrir-inc Sleipnir Mobile=1.1.0
Fenrir-inc Sleipnir Mobile=1.2.0
Fenrir-inc Sleipnir Mobile=1.3.0
Fenrir-inc Sleipnir Mobile=1.4.0
Fenrir-inc Sleipnir Mobile=1.5.0
Fenrir-inc Sleipnir Mobile=1.5.1
Fenrir-inc Sleipnir Mobile=1.6.0
Fenrir-inc Sleipnir Mobile=1.7.0
Fenrir-inc Sleipnir Mobile=1.7.1
Fenrir-inc Sleipnir Mobile=2.0.0
Fenrir-inc Sleipnir Mobile=2.0.1
Fenrir-inc Sleipnir Mobile=2.0.2
Fenrir-inc Sleipnir Mobile=2.0.3
Fenrir-inc Sleipnir Mobile=2.0.4
Fenrir-inc Sleipnir Mobile=2.1.0
Fenrir-inc Sleipnir Mobile=2.2.0
Fenrir-inc Sleipnir Mobile=2.2.1
Fenrir-inc Sleipnir Mobile=2.2.2
Fenrir-inc Sleipnir Mobile=2.2.3
Fenrir-inc Sleipnir Mobile=2.3.0
Fenrir-inc Sleipnir Mobile=2.4.0
Fenrir-inc Sleipnir Mobile=2.4.1
Fenrir-inc Sleipnir Mobile=2.5.0
Fenrir-inc Sleipnir Mobile=2.5.1
Fenrir-inc Sleipnir Mobile=2.6.0
Fenrir-inc Sleipnir Mobile=2.7.0
Fenrir-inc Sleipnir Mobile=2.8.0
Google Android
Fenrir-inc Sleipnir Mobile<=2.9.1
Fenrir-inc Sleipnir Mobile=1.0.0-alpha
Fenrir-inc Sleipnir Mobile=1.0.0-beta_update1
Fenrir-inc Sleipnir Mobile=1.0.0-rc
Fenrir-inc Sleipnir Mobile=1.1.0
Fenrir-inc Sleipnir Mobile=1.2.0
Fenrir-inc Sleipnir Mobile=1.3.0
Fenrir-inc Sleipnir Mobile=1.4.0
Fenrir-inc Sleipnir Mobile=1.5.0
Fenrir-inc Sleipnir Mobile=1.5.1
Fenrir-inc Sleipnir Mobile=1.6.0
Fenrir-inc Sleipnir Mobile=1.7.0
Fenrir-inc Sleipnir Mobile=1.7.1
Fenrir-inc Sleipnir Mobile=2.0.0
Fenrir-inc Sleipnir Mobile=2.0.1
Fenrir-inc Sleipnir Mobile=2.0.2
Fenrir-inc Sleipnir Mobile=2.0.3
Fenrir-inc Sleipnir Mobile=2.0.4
Fenrir-inc Sleipnir Mobile=2.1.0
Fenrir-inc Sleipnir Mobile=2.2.0
Fenrir-inc Sleipnir Mobile=2.2.1
Fenrir-inc Sleipnir Mobile=2.2.2
Fenrir-inc Sleipnir Mobile=2.2.3
Fenrir-inc Sleipnir Mobile=2.3.0
Fenrir-inc Sleipnir Mobile=2.4.0
Fenrir-inc Sleipnir Mobile=2.4.1
Fenrir-inc Sleipnir Mobile=2.5.0
Fenrir-inc Sleipnir Mobile=2.5.1
Fenrir-inc Sleipnir Mobile=2.6.0
Fenrir-inc Sleipnir Mobile=2.7.0
Fenrir-inc Sleipnir Mobile=2.8.0
Fenrir-inc Sleipnir Mobile=2.9.0
Event History
Jun 3, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2317?
The severity of CVE-2013-2317 is considered moderate due to the potential for remote code execution via address bar spoofing.
2
How do I fix CVE-2013-2317?
To fix CVE-2013-2317, users should upgrade to Sleipnir Mobile version 2.9.2 or later.
3
Who is affected by CVE-2013-2317?
CVE-2013-2317 affects all versions of Sleipnir Mobile 2.9.1 and earlier, including Sleipnir Mobile Black Edition.
4
What type of vulnerability is CVE-2013-2317?
CVE-2013-2317 is classified as an address bar spoofing vulnerability.
5
Can CVE-2013-2317 be exploited remotely?
Yes, CVE-2013-2317 can be exploited remotely by attackers to spoof the address bar in the affected applications.