{"id":"CVE-2010-4804","aliases":["EUVD-2010-4769","GHSA-834r-289g-ffcv"],"status":"published","title":"The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents...","description":"The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.27152,"percentile":0.98064,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200"],"published":"2011-06-09T10:00:00Z","modified":"2026-06-16T23:25:34Z","exploits":[{"source":"exploitdb","id":"EDB-18164","title":"Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities","type":"webapps","platform":"android","date":"2011-11-28","url":"https://www.exploit-db.com/exploits/18164"},{"source":"metasploit","id":"auxiliary/gather/android_htmlfileprovider","title":"Android Content Provider File Disclosure","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/gather/android_htmlfileprovider"},{"source":"pocgithub","id":"thomascannon/android-cve-2010-4804","title":"thomascannon/android-cve-2010-4804","date":"2014-02-06","url":"https://github.com/thomascannon/android-cve-2010-4804"}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"http://www.securityfocus.com/bid/48256","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.slashgear.com/android-data-theft-exploit-to-be-plugged-in-gingerbread-video-24116054/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3Ba=commit%3Bh=604a598e1e01bda781600a45e0a971898a582666","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=f440831d76817e837164ca18c7705e81d2391f87","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.csc.ncsu.edu/faculty/jiang/nexuss.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4804"},{"url":"http://android.git.kernel.org/?p=platform/frameworks/base.git;a=commit;h=f440831d76817e837164ca18c7705e81d2391f87"},{"url":"http://android.git.kernel.org/?p=platform/packages/apps/Browser.git;a=commit;h=604a598e1e01bda781600a45e0a971898a582666"},{"url":"http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability"},{"url":"http://www.slashgear.com/android-data-theft-exploit-to-be-plugged-in-gingerbread-video-24116054"},{"url":"https://github.com/advisories/GHSA-834r-289g-ffcv"}],"sources":{"cve":[{"id":"CVE-2010-4804","description":"The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.","status":"published","published":"2011-06-09T10:00:00Z","modified":"2024-08-07T04:02:29.052Z","updated_at":"2026-11-02T14:33:28.858903Z"}],"euvd":[{"id":"EUVD-2010-4769","description":"The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.","status":"published","published":"2011-06-09T10:00:00Z","modified":"2024-08-07T04:02:29Z","updated_at":"2026-11-03T01:39:28.963093Z"}],"ghsa":[{"id":"GHSA-834r-289g-ffcv","title":"The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents...","description":"The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.","status":"published","published":"2022-05-17T05:37:18Z","modified":"2025-04-11T03:48:40Z","cwes":["CWE-200"],"updated_at":"2026-11-02T15:01:08.691526Z"}],"nvd":[{"id":"CVE-2010-4804","description":"The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.","status":"published","published":"2011-06-09T10:36:27.617Z","modified":"2026-06-16T23:25:34.753Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:03.297831Z"}]}}