CVE-2018-13042 - The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability

Back Back to CVE browser

MEDIUM

The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability

Published Oct 5, 2018

5.9

MEDIUM

CVSS 3.0

EPSS 7.89%

Description

The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo.OpenYoloDeleteActivity or com.agilebits.onepassword.filling.openyolo.OpenYoloRetrieveActivity from an external application (since they are exported), it is possible to crash the 1Password instance.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

https://app-updates.agilebits.com/product_history/OPA4
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4992
Advisory
https://www.exploit-db.com/exploits/46165/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
https://www.valbrux.it/blog/2019/01/22/cve-2018-13042-1password-android-7-0-denial-of-service/
x_refsource_MISC

Link	Providers	Tags
https://app-updates.agilebits.com/product_history/OPA4		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4992		Advisory
https://www.exploit-db.com/exploits/46165/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
https://www.valbrux.it/blog/2019/01/22/cve-2018-13042-1password-android-7-0-denial-of-service/		x_refsource_MISC