CVE-2014-1885

Published: Mar 3, 2014Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain write access to external-storage resources, by leveraging control over any Google syndication advertising domain.

Affected (1)

Products: Hsgroup: Forzearmate

Hsgroup

1 product

Forzearmate

Configuration A

1 vulnerable · 21 platform

Vulnerable Software	Affected Versions
Hsgroup Forzearmate	All versions

Running on/with	Platform Versions
Adobe Phonegap	Version 2.0.0
Adobe Phonegap	Version 2.0.0 rc1
Adobe Phonegap	Version 2.1.0
Adobe Phonegap	Version 2.2.0
Adobe Phonegap	Version 2.2.0 rc1
Adobe Phonegap	Version 2.2.0 rc2
Adobe Phonegap	Version 2.3.0
Adobe Phonegap	Version 2.3.0 rc1
Adobe Phonegap	Version 2.3.0 rc2
Adobe Phonegap	Version 2.4.0
Adobe Phonegap	Version 2.4.0 rc1
Adobe Phonegap	Version 2.5.0
Adobe Phonegap	Version 2.5.0 rc1
Adobe Phonegap	Version 2.6.0
Adobe Phonegap	Version 2.6.0 rc1
Adobe Phonegap	Version 2.7.0
Adobe Phonegap	Version 2.7.0 rc1
Adobe Phonegap	Version 2.8.0
Adobe Phonegap	Version 2.8.1
Adobe Phonegap	Version 2.9.0
Adobe Phonegap	Version 2.9.0 rc1