Improper authorization in handler for custom URL scheme issue "Yahoo! Shopping" App Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead user access an arbitrary website on the vulnerable App. As result, become victim of phishing attack.