Description
The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows an attacker to execute arbitrary JavaScript code via the allvideo.downloader.browser.DefaultBrowserActivity component.
Published: 2024-11-11
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 12 Nov 2024 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google ds Allvideo.downloader.browser Application For Android
Weaknesses CWE-94
CPEs cpe:2.3:a:google:ds_allvideo.downloader.browser_application_for_android:*:*:*:*:*:*:*:*
Vendors & Products Google
Google ds Allvideo.downloader.browser Application For Android
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 11 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Description The DS allvideo.downloader.browser (aka Fast Video Downloader: Browser) application through 1.6-RC1 for Android allows an attacker to execute arbitrary JavaScript code via the allvideo.downloader.browser.DefaultBrowserActivity component.
References

Subscriptions

Google Ds Allvideo.downloader.browser Application For Android
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-11-12T16:14:38.488Z

Reserved: 2024-09-16T00:00:00.000Z

Link: CVE-2024-46965

cve-icon Vulnrichment

Updated: 2024-11-12T16:14:26.958Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-11T20:15:17.740

Modified: 2024-11-12T17:35:09.427

Link: CVE-2024-46965

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses