CVE-2014-1887

Published: Mar 3, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geolocation information, by leveraging control over one of a number of adult sites, as demonstrated by (1) freelifetimecheating.com and (2) www.babesroulette.com.

Affected (1)

Products: Drinkedin: Drinkedin Barfinder

Drinkedin

1 product

Drinkedin Barfinder

Configuration A

1 vulnerable · 21 platform

Vulnerable Software	Affected Versions
Drinkedin Drinkedin Barfinder	All versions

Running on/with	Platform Versions
Adobe Phonegap	Version 2.0.0
Adobe Phonegap	Version 2.0.0 rc1
Adobe Phonegap	Version 2.1.0
Adobe Phonegap	Version 2.2.0
Adobe Phonegap	Version 2.2.0 rc1
Adobe Phonegap	Version 2.2.0 rc2
Adobe Phonegap	Version 2.3.0
Adobe Phonegap	Version 2.3.0 rc1
Adobe Phonegap	Version 2.3.0 rc2
Adobe Phonegap	Version 2.4.0
Adobe Phonegap	Version 2.4.0 rc1
Adobe Phonegap	Version 2.5.0
Adobe Phonegap	Version 2.5.0 rc1
Adobe Phonegap	Version 2.6.0
Adobe Phonegap	Version 2.6.0 rc1
Adobe Phonegap	Version 2.7.0
Adobe Phonegap	Version 2.7.0 rc1
Adobe Phonegap	Version 2.8.0
Adobe Phonegap	Version 2.8.1
Adobe Phonegap	Version 2.9.0
Adobe Phonegap	Version 2.9.0 rc1