CVE-2013-3642

2022-10-0316:14:45

jpcert

www.cve.org

android

webview class

sensitive information

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.0%

JSON

The Angel Browser application 1.47b and earlier for Android 1.6 through 2.1, 1.62b and earlier for Android 2.2 through 2.3.4, 1.68b and earlier for Android 3.0 through 4.0.3, and 1.76b and earlier for Android 4.1 through 4.2 does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.

References

jvn.jp/en/jp/JVN79301570/index.html

jvndb.jvn.jp/jvndb/JVNDB-2013-000055