CVE-2010-4804

The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

26.95% chance of exploitation in the next 30 days, 98th percentile

Published

2011-06-09

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://www.slashgear.com/android-data-theft-exploit-to-be-plugged-in-gingerbread-video-24…
• thomascannon/android-cve-2010-48048★ · 2014-02-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/android_htmlfileprovider…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18164

References

• CVE Record
• NVD entry

Related

• CVE-2010-4801
• CVE-2010-4808
• CVE-2010-4800
• CVE-2010-4809
• CVE-2010-4799
• CVE-2010-4810