CVE-2014-1887: Medium severity DrinkedIn Drinkedin Barfinder Android vulnerability
The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geolocation information, by leveraging control over one of a number of adult sites, as demonstrated by (1) freelifetimecheating.com and (2) www.babesroulette.com.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1887?
CVE-2014-1887 is considered a high severity vulnerability due to its potential for remote code execution and exposure of sensitive geolocation information.
How do I fix CVE-2014-1887?
To fix CVE-2014-1887, upgrade the DrinkedIn BarFinder application to a version that is not vulnerable, typically versions after Adobe PhoneGap 2.9.0.
What types of attacks can exploit CVE-2014-1887?
CVE-2014-1887 can be exploited via malicious adult websites that inject arbitrary JavaScript code into the DrinkedIn BarFinder application.
Which software versions are affected by CVE-2014-1887?
CVE-2014-1887 affects the DrinkedIn BarFinder application utilizing Adobe PhoneGap 2.9.0 and earlier versions.
What information can be exposed by CVE-2014-1887?
CVE-2014-1887 can expose sensitive fine-geolocation information to remote attackers.