CVE-2014-1886: Medium severity Edinburghtour Edinburgh By Bus Android vulnerability
The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently access external-storage resources, by leveraging control over one of a number of "obscure Eastern European dating sites."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1886?
CVE-2014-1886 is considered to have a high severity due to the potential for remote attackers to execute arbitrary JavaScript code.
How do I fix CVE-2014-1886?
To fix CVE-2014-1886, upgrade the Adobe PhoneGap to a version higher than 2.9.0.
What types of attacks can exploit CVE-2014-1886?
Attackers can exploit CVE-2014-1886 to execute arbitrary JavaScript code and access external storage resources.
Which applications are affected by CVE-2014-1886?
The Edinburgh by Bus application for Android, using Adobe PhoneGap 2.9.0 or earlier, is affected by CVE-2014-1886.
Can external websites be used in the exploitation of CVE-2014-1886?
Yes, exploitation of CVE-2014-1886 can involve control over obscure external websites, particularly dating sites.