CVE-2012-1249

2012-05-2120:00:00

jpcert

www.cve.org

6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.9%

JSON

The iLunascape application 1.0.4.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive stored information via a crafted application.

References

jvn.jp/en/jp/JVN86044443/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000044

osvdb.org/82035

secunia.com/advisories/49253

www.securityfocus.com/bid/53619

play.google.com/store/apps/details?id=jp.co.lunascape.android.ilunascape