CVE-2014-1884 : Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows

Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier on Windows Phone 7 and 8 do not properly restrict navigation events, which allows remote attackers to bypass intended device-resource restrictions via content that is accessed (1) in an IFRAME element or (2) with the XMLHttpRequest method by a crafted application.

Published 2014-03-03 04:50:46

Updated 2014-03-03 20:37:55

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2014-1884

Apache » Cordova
Versions up to, including, (<=) 3.3.0
cpe:2.3:a:apache:cordova:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Apache » Cordova » Version: 3.3.0 Update RC1
cpe:2.3:a:apache:cordova:3.3.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Apache » Cordova » Version: 3.2.0
cpe:2.3:a:apache:cordova:3.2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Apache » Cordova » Version: 3.0.0
cpe:2.3:a:apache:cordova:3.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Apache » Cordova » Version: 3.0.0 Update RC1
cpe:2.3:a:apache:cordova:3.0.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Apache » Cordova » Version: 3.1.0
cpe:2.3:a:apache:cordova:3.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Apache » Cordova » Version: 3.1.0 Update RC1
cpe:2.3:a:apache:cordova:3.1.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Apache » Cordova » Version: 3.2.0 Update RC1
cpe:2.3:a:apache:cordova:3.2.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap
Versions up to, including, (<=) 2.9.0
cpe:2.3:a:adobe:phonegap:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.0.0
cpe:2.3:a:adobe:phonegap:2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.0.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.0.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.1.0
cpe:2.3:a:adobe:phonegap:2.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.7.0
cpe:2.3:a:adobe:phonegap:2.7.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.2.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.2.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.3.0
cpe:2.3:a:adobe:phonegap:2.3.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.5.0
cpe:2.3:a:adobe:phonegap:2.5.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.6.0
cpe:2.3:a:adobe:phonegap:2.6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.9.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.9.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.3.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.3.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.3.0 Update RC2
cpe:2.3:a:adobe:phonegap:2.3.0:rc2:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.4.0
cpe:2.3:a:adobe:phonegap:2.4.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.4.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.4.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.2.0
cpe:2.3:a:adobe:phonegap:2.2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.2.0 Update RC2
cpe:2.3:a:adobe:phonegap:2.2.0:rc2:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.5.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.5.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.6.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.6.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.7.0 Update RC1
cpe:2.3:a:adobe:phonegap:2.7.0:rc1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.8.0
cpe:2.3:a:adobe:phonegap:2.8.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8
Adobe » Phonegap » Version: 2.8.1
cpe:2.3:a:adobe:phonegap:2.8.1:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Phone » Version: 7
When used together with: Microsoft » Windows Phone » Version: 8

Exploit prediction scoring system (EPSS) score for CVE-2014-1884

EPSS FAQ

1.53%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 87 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-1884

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2014-1884

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2014-1884

http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt

Apache Cordova / PhoneGap Whitelist Bypass ≈ Packet Storm

CVEs referencing this url
http://seclists.org/bugtraq/2014/Jan/96

Bugtraq: Security Vulnerabilities in Apache Cordova / PhoneGap
Vendor Advisory

CVEs referencing this url
http://www.internetsociety.org/ndss2014/programme#session3

Programme announced for 2014 NDSS Security Symposium | Internet Society

CVEs referencing this url
http://www.cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf

Exploit

CVEs referencing this url
http://openwall.com/lists/oss-security/2014/02/07/9

oss-security - Re: CVE request: multiple issues in Apache Cordova/PhoneGap

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2014-1884

Products affected by CVE-2014-1884

Exploit prediction scoring system (EPSS) score for CVE-2014-1884

CVSS scores for CVE-2014-1884

CWE ids for CVE-2014-1884

References for CVE-2014-1884