topic Security vulnerability in Webview component in XPERIA archive

Security vulnerability in Webview component

racoon — Tue, 13 Jan 2015 17:39:09 GMT

Hi Sony,

I am aware that you plan no update to 4.4. But what do you do against the security problem in the Webview component?

Using another browser is a solution, but a lot of apps use this component - incl. advertisement services.

http://www.zdnet.com/article/google-stops-providing-patches-for-pre-kitkat-webview-abandons-930m-users/

Re: Security vulnerability in Webview component

Thommo — Tue, 13 Jan 2015 17:41:06 GMT

As said Google need to release an update to patch this

Re: Security vulnerability in Webview component

racoon — Tue, 13 Jan 2015 17:49:39 GMT

Please look at link. Google doesn't support Webview pre Kitkat (4.4) any more...

Re: Security vulnerability in Webview component

Thommo — Tue, 13 Jan 2015 19:49:21 GMT

That's just one link that has been around for weeks but they have watered down the original story so as above it is upto Google to provide a patch and if Google won't do this then how can Sony fix a Google issue

Re: Security vulnerability in Webview component

racoon — Tue, 13 Jan 2015 20:35:18 GMT

Hmm, let me think for a moment... update to 4.4?

Re: Security vulnerability in Webview component

Thommo — Tue, 13 Jan 2015 21:26:33 GMT

Hmmm let me think - If the chip makers won't make and release an updated driver to work with new firmware as happened with the Xperia S and others then again how can Sony???

Re: Security vulnerability in Webview component

racoon — Wed, 14 Jan 2015 11:32:09 GMT

But it's a Xperia L and there exist drivers for newer Android versions. It's sad that a company like Sony is not concerned with security for its customers.