CVE-2012-5187

The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.

Score

CVSS 2.0 4.3 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2013-02-06

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Weathernews Touch (Weathernews)

References

• http://jvn.jp/en/jp/JVN86040029/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005