CVE-2012-4007

2022-10-0316:15:32

jpcert

www.cve.org

mixi application

android

remote attackers

sensitive information

friends' comments

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.6%

JSON

The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends’ comments via a crafted application that leverages the storage of these comments on an SD card.

References

jvn.jp/en/jp/JVN92038939/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000078