Skip to content

Latest commit

 

History

History
33 lines (24 loc) · 1.7 KB

VS-2017-001.md

File metadata and controls

33 lines (24 loc) · 1.7 KB

[VS-2017-001] Dolphin Browser for Android Backup & Restore Arbitrary File Write Vulnerability

CVE ID

CVE-2017-17551

CVSS Score

https://nvd.nist.gov/vuln/detail/CVE-2017-17551

Vendor

Mobotap

Product

Dolphin Browser for Android < 12.0.2

Vulnerability Details

The Backup and Restore feature in Mobotap's Dolphin Browser for Android 12.0.2, suffers from an arbitrary file write vulnerability when attempting to restore browser settings from a malicious Dolphin Browser backup file. This arbitrary file write vulnerability, allows an attacker to overwrite a specific executable in the Dolphin Browser's data directory with a crafted malicious executable. Every time the Dolphin Browser is launched, it will attempt to run the malicious executable from disk, thus executing the attacker's code.

Exploit

https://github.com/VerSprite/research/tree/master/exploits/VS-2017-001

Vendor Response

Mobotap has not issued a reponse nor an update to remediate this vulnerability

Disclosure Timeline

  • 2017-11-28 - Reached out on Twitter and asked to speak with someone who is responsible for product security
  • 2017-12-04 - Emailed requesting to speak with someone who can address security issues in the Dolphin Browser for Android, no response
  • 2017-12-07 - Emailed to verify initial email was received, no response
  • 2017-12-10 - Emailed to inform the public release of an advisory, CC'ed security@dolphin.com and received a bounce on the email address
  • 2017-12-11 - Public zero day release of advisory

Credit

Benjamin Watson of VerSprite Security (@rotlogix)