CVE-2012-2635

The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.

Score

CVSS 2.0 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2012-06-15

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Dolphin Browser Hd (Dolphin-browser)
• Dolphin For Pad (Dolphin-browser)

References

• http://jvn.jp/en/jp/JVN90751882/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000057