Approved changes feed: RSS · Atom

cpe:2.3:a:solarized:firedown_browser_and_downloader:1.0.76:*:*:*:*:*:*:*

part: a version: 1.0.76 update: *

VendorSolarized (da0c25c1-201a-50f8-b3e8-14dd92abedfc)
ProductFiredown Browser And Downloader (bb71988a-e07c-55ae-858f-daad2f13f91c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31974 vulnerable 2026-06-08 06:35:32.518232 Details available
The com.solarized.firedown (aka Solarized FireDown Browser & Downloader) application 1.0.76 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. com.solarized.firedown.IntentActivity uses a WebView component to display web content and doesn't adequately sanitize the URI or any extra data passed in the intent by any installed application (with no permissions).
Published: 2024-05-17T15:36:38.054Z
Updated: 2025-02-13T15:48:02.366Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.