The Boat Browser application before 4.2 and Boat Browser Mini application before 3.9 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
CVSS 2.0
Severity: LOW
Problem Type: CWE-264,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| boatmob | boat_browser | 2.5.1 |
| boatmob | boat_browser | 2.4.1 |
| boatmob | boat_browser_mini | 2.9.1 |
| boatmob | boat_browser_mini | 2.9 |
| boatmob | boat_browser_mini | 3.5 |
| boatmob | boat_browser_mini | 3.1 |
| boatmob | boat_browser_mini | 2.7.1 |
| boatmob | boat_browser_mini | 2.9.2 |
| boatmob | boat_browser | 2.1 |
| boatmob | boat_browser | 2.2 |
| boatmob | boat_browser | 3.1 |
| boatmob | boat_browser_mini | 3.6 |
| boatmob | boat_browser_mini | 3.0.2 |
| boatmob | boat_browser_mini | 2.8 |
| boatmob | boat_browser_mini | 3.3 |
| boatmob | boat_browser | * |
| boatmob | boat_browser_mini | 3.0.1 |
| boatmob | boat_browser_mini | 2.6.1 |
| boatmob | boat_browser_mini | * |
| boatmob | boat_browser_mini | 3.7 |
| boatmob | boat_browser | 3.0 |
| boatmob | boat_browser | 2.6 |
| boatmob | boat_browser | 3.2.1 |
| boatmob | boat_browser | 3.3 |
| boatmob | boat_browser_mini | 2.7 |
| boatmob | boat_browser | 2.3 |
| boatmob | boat_browser_mini | 3.4 |
| boatmob | boat_browser | 2.0 |
| boatmob | boat_browser_mini | 3.2 |