CVE-2013-2306

Published: Apr 26, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar via a crafted web site.

Affected (7)

Products: Jb+: Jigbrowser+

Jb+

1 product

Jigbrowser+

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Jb+ Jigbrowser+	Up to 1.6.3
Jb+ Jigbrowser+	Version 1.0.5
Jb+ Jigbrowser+	Version 1.1.1
Jb+ Jigbrowser+	Version 1.5.0
Jb+ Jigbrowser+	Version 1.5.5
Jb+ Jigbrowser+	Version 1.6.0
Jb+ Jigbrowser+	Version 1.6.2

References (6)

http://jvn.jp/en/jp/JVN01313594/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000036

Source: vultures@jpcert.or.jp

https://play.google.com/store/apps/details?id=jp.jig.product.browser_plus

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN01313594/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000036

Source: af854a3a-2127-422b-91ae-364da2661108

https://play.google.com/store/apps/details?id=jp.jig.product.browser_plus

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.