CVE-2014-8889

Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack.

• CWE-200

• http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2015/Mar/61Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/534843/100/1500/threaded
• http://www.securityfocus.com/bid/73035Third Party Advisory, VDB Entry
• https://securityintelligence.com/droppedin-remotely-exploitable-vulnerability-in-the-dropbox-sdk-for-android/Third Party Advisory
• http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2015/Mar/61Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/534843/100/1500/threaded
• http://www.securityfocus.com/bid/73035Third Party Advisory, VDB Entry
• https://securityintelligence.com/droppedin-remotely-exploitable-vulnerability-in-the-dropbox-sdk-for-android/Third Party Advisory

Published

Sep 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8877The alterSearchQuery function in lib/controllers/CmdownloadC…
• CVE-2014-8878KDE KMail does not encrypt attachments in emails when "autom…
• CVE-2014-8884Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_se…
• CVE-2014-8886AVM FRITZ!OS before 6.30 extracts the contents of firmware u…
• CVE-2014-8887IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x…
• CVE-2014-8888The remote administration interface in D-Link DIR-815 device…
• CVE-2014-8890IBM WebSphere Application Server Liberty Profile 8.5.x befor…
• CVE-2014-8891Unspecified vulnerability in the Java Virtual Machine (JVM) …
• CVE-2014-8892Unspecified vulnerability in the Java Virtual Machine (JVM) …
• CVE-2014-8893Multiple cross-site scripting (XSS) vulnerabilities in (1) m…
• CVE-2014-8894Open redirect vulnerability in IBM TRIRIGA Application Platf…
• CVE-2014-8895IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2…