Android: Vulnerabilities in the Mercury and Dolphin browsers

summerheat · Aug 24, 2015

http://rotlogix.com/2015/08/22/remote-code-execution-in-dolphin-browser-for-android/

An attacker with the ability to control the network traffic for users of the Dolphin Browser for Android, can modify the functionality of downloading and applying new themes for the browser. Through the exploitation of this functionality, an attacker can achieve an arbitrary file write, which can then be turned into code execution within the context of the browser on the user's device. The only user interaction this requires is selecting, downloading, and applying a new Dolphin Browser theme.
Click to expand...

http://rotlogix.com/2015/08/23/exploiting-the-mercury-browser-for-android/

The Mercury Browser for Android suffers from an insecure Intent URI scheme implementation and a path traversal vulnerability within a custom web server used to support its WiFi Transferfeature. Chaining these vulnerabilities together can allow a remote attacker to perform arbitrary reading and writing of files within the Mercury Browser's data directory.
Click to expand...

Log in or Sign up

Android: Vulnerabilities in the Mercury and Dolphin browsers

summerheat Registered Member

Log in or Sign up

Android: Vulnerabilities in the Mercury and Dolphin browsers

summerheat Registered Member

Useful Searches