CVE-2017-17553: Medium severity Changyou Dolphin Android vulnerability

Published Dec 12, 2017

Updated

The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This vulnerability could allow attackers to abuse this implementation through a malicious Intent URI, in order to invoke private Activities within the Dolphin Browser.

Affected Software

1 affected component

Changyou Dolphin Android=12.0.2

Event History

Dec 12, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2017-17553?

CVE-2017-17553 is categorized as a high severity vulnerability due to its potential for exploitation by attackers.

How do I fix CVE-2017-17553?

To fix CVE-2017-17553, update the Dolphin Browser to the latest version that has addressed this vulnerability.

What types of attacks are possible due to CVE-2017-17553?

CVE-2017-17553 allows attackers to invoke private Activities within the Dolphin Browser using malicious Intent URIs.

Which software versions are affected by CVE-2017-17553?

CVE-2017-17553 specifically affects the Dolphin Browser version 12.0.2 on Android.

What is the primary cause of CVE-2017-17553?

CVE-2017-17553 is caused by an insecure parsing implementation of the Intent URI scheme within the Dolphin Browser.