For instance , Miller found a vulnerability in the Android mobile platform last year that could have allowed an attacker to remotely take control of the browser , access credentials , and install a keystroke logger if the user visited a malicious Web page .