CVE-2014-8889

Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack.

CVSS v3.0 NVD

5.3 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

2.6 LOWAV:N/AC:H/Au:N/C:P/I:N/A:N

EPSS

5.83% chance of exploitation in the next 30 days, 93rd percentile

Published

2017-09-25

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.h…

Security advisories

• http://seclists.org/fulldisclosure/2015/Mar/61
• http://www.securityfocus.com/bid/73035
• https://securityintelligence.com/droppedin-remotely-exploitable-vulnerability-in-the-drop…

References

• CVE Record
• NVD entry