VulnerabilityModified

CVE-2013-2316

Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307.

MEDIUM 5.8EPSS 1.52%

Does this matter?

Lower severity and a low EPSS score (1.52%). Track it; it rarely justifies an emergency change on its own.

Description

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307.

CVSS 2.0: 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS: 1.52% probability · 73th percentile
CISA KEV: Not listed
Affected: yahoo/yahoo\! browser
Source: vultures@jpcert.or.jp

References

http://jvn.jp/en/jp/JVN31817913/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000045
http://jvn.jp/en/jp/JVN31817913/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000045

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.