CVE-2014-1670
UnknownEPSS 13.71%
Last modified
CVE-2014-1670 is a vulnerability of currently unknown severity. The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response.. EPSS estimates a 13.71% chance of exploitation in the next 30 days.
Description
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Bing | <= 4.2.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-1670?
The Microsoft Bing application before 4.2.1 for Android allows remote attackers to install arbitrary APK files via vectors involving a crafted DNS response.
How severe is CVE-2014-1670?
Severity scoring for CVE-2014-1670 is pending analysis. The EPSS model estimates a 13.71% probability of exploitation in the next 30 days.
How do I fix CVE-2014-1670?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-1661Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-1662Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-1663Unspecified vulnerability in Citrix XenMobile Device Manager…
- CVE-2014-1664The Citrix GoToMeeting application 5.0.799.1238 for Android …
- CVE-2014-1665Cross-site scripting (XSS) vulnerability in ownCloud before …
- CVE-2014-1666The do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 thro…
- CVE-2014-1671Multiple SQL injection vulnerabilities in Dell KACE K1000 5.…
- CVE-2014-1672Check Point R75.47 Security Gateway and Management Server do…
- CVE-2014-1673Check Point Session Authentication Agent allows remote attac…
- CVE-2014-1677Technicolor TC7200 with firmware STD6.01.12 could allow remo…
- CVE-2014-1679Cross-site scripting (XSS) vulnerability in Open-Xchange (OX…
- CVE-2014-1680Untrusted search path vulnerability in Bandisoft Bandizip be…
Are you affected by CVE-2014-1670?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST