CVE-2012-0316

The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.

Score

CVSS 2.0 5.0 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2012-03-02

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Android Activities (Cookpad)
• Android Mykitchen (Cookpad)

References

• http://cookpad.typepad.jp/help/2012/02/23oshirase.html
• http://jvn.jp/en/jp/JVN25731073/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000014
• http://osvdb.org/79643
• http://secunia.com/advisories/48065
• http://www.securityfocus.com/bid/52189