Vulnerability Details : CVE-2012-6637
Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanism via a domain name that contains an acceptable name as an initial substring.
Vulnerability category: Input validation
Exploit prediction scoring system (EPSS) score for CVE-2012-6637
Probability of exploitation activity in the next 30 days: 0.63%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 78 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-6637
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2012-6637
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-6637
-
http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt
Apache Cordova / PhoneGap Whitelist Bypass ≈ Packet Storm
-
http://seclists.org/bugtraq/2014/Jan/96
Bugtraq: Security Vulnerabilities in Apache Cordova / PhoneGapPatch
-
http://www.internetsociety.org/ndss2014/programme#session3
Programme announced for 2014 NDSS Security Symposium | Internet Society
-
http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf
Exploit
-
http://labs.mwrinfosecurity.com/blog/2012/04/30/building-android-javajavascript-bridges/
Building Android Java/JavaScript Bridges
-
http://openwall.com/lists/oss-security/2014/02/07/9
oss-security - Re: CVE request: multiple issues in Apache Cordova/PhoneGap
Products affected by CVE-2012-6637
- cpe:2.3:a:apache:cordova:*:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cordova:3.3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:apache:cordova:3.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cordova:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cordova:3.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:apache:cordova:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:cordova:3.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:apache:cordova:3.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:*:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.9.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.3.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.4.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.2.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.5.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.6.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.7.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:phonegap:2.8.1:*:*:*:*:*:*:*