Sony Playstation Vita browser 'window. open () 'URI Spoofing Vulnerability

Release date:
Updated on:

Affected Systems:
Sony Playstation Vita 2.05
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57762

Playstation Vita is Sony's next-generation host platform.

Sony Playstation Vita Browser 2.05 uses the JS window. open () method to process URLs with errors, causing URI Spoofing.

<* Source: David Vieira-Kurz

Link: http://seclists.org/bugtraq/2013/Feb/24
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Http://de.playstation.com/psvita/

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Sony
----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.sony.co.uk/support/en/product/