critical9.8
CVE-2016-1155
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitr…
Impact
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 2.2, 2.2.1, 2.2.2, 2.2.3, 2.3, 2.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97662
- https://android.googlesource.com/platform/external/okhttp/+/71b9f47b26fb57ac3e436a19519c6e3ec70e86eb
- https://jvn.jp/vu/JVNVU99757346/index.html
- http://www.securityfocus.com/bid/97662
- https://android.googlesource.com/platform/external/okhttp/+/71b9f47b26fb57ac3e436a19519c6e3ec70e86eb
- https://jvn.jp/vu/JVNVU99757346/index.html