CVE-2013-3642: Infoleak
First published: Mon Jun 17 2013(Updated: )
The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earlier for Android 3.0 through 4.0.3, and 1.76b and earlier for Android 4.1 through 4.2 does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adgjm Angel Browser | <=1.47b | |
| Android | =1.6 | |
| Android | =2.0 | |
| Android | =2.0.1 | |
| Android | =2.1 | |
| Adgjm Angel Browser | <=1.62b | |
| Android | =2.2 | |
| Android | =2.2-rev1 | |
| Android | =2.2.1 | |
| Android | =2.2.2 | |
| Android | =2.2.3 | |
| Android | =2.3 | |
| Android | =2.3.1 | |
| Android | =2.3.2 | |
| Android | =2.3.3 | |
| Android | =2.3.4 | |
| Adgjm Angel Browser | <=1.68b | |
| Android | =3.0 | |
| Android | =3.1 | |
| Android | =3.2 | |
| Android | =3.2.1 | |
| Android | =3.2.2 | |
| Android | =3.2.4 | |
| Android | =3.2.6 | |
| Android | =4.0 | |
| Android | =4.0.1 | |
| Android | =4.0.2 | |
| Android | =4.0.3 | |
| Adgjm Angel Browser | <=1.76b | |
| Android | =4.1 | |
| Android | =4.1.2 | |
| Android | =4.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-3642?
CVE-2013-3642 is classified as a high-severity vulnerability due to its potential impact on user data security.
How do I fix CVE-2013-3642?
To mitigate CVE-2013-3642, users should update to Angel Browser version 1.76b or later.
Which versions of Angel Browser are affected by CVE-2013-3642?
Angel Browser versions 1.47b and earlier, 1.62b and earlier, 1.68b and earlier, and 1.76b and earlier for various Android versions are affected by CVE-2013-3642.
Is there a workaround for CVE-2013-3642?
Disabling or uninstalling the affected versions of Angel Browser can serve as a temporary workaround for CVE-2013-3642.
What type of attacks can exploit CVE-2013-3642?
CVE-2013-3642 can be exploited by attackers to inject malicious content into web pages viewed through the affected Angel Browser versions.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adgjm
- canonical/adgjm angel browser
- version/adgjm angel browser/1.47b
- vendor/google
- canonical/android
- version/android/1.6
- version/android/2.0
- version/android/2.0.1
- version/android/2.1
- version/adgjm angel browser/1.62b
- version/android/2.2
- version/android/2.2-rev1
- version/android/2.2.1
- version/android/2.2.2
- version/android/2.2.3
- version/android/2.3
- version/android/2.3.1
- version/android/2.3.2
- version/android/2.3.3
- version/android/2.3.4
- version/adgjm angel browser/1.68b
- version/android/3.0
- version/android/3.1
- version/android/3.2
- version/android/3.2.1
- version/android/3.2.2
- version/android/3.2.4
- version/android/3.2.6
- version/android/4.0
- version/android/4.0.1
- version/android/4.0.2
- version/android/4.0.3
- version/adgjm angel browser/1.76b
- version/android/4.1
- version/android/4.1.2
- version/android/4.2