{"hash": "003b96f53004ce23a3ac1f3c38169cba9ff28834dcfbf804dec45849aa54fc3f", "id": "HACKAPP:COM.DWGSEE.DWGVIEWER.APK", "lastseen": "2016-09-26T20:43:32", "viewCount": 0, "hashmap": [{"hash": "f3214c5a2784610062a7b84c51ef47f9", "key": "affectedSoftware"}, {"hash": "f9fa10ba956cacf91d7878861139efb9", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "d4be9c4fc84262b4f39f89565918568f", "key": "cvss"}, {"hash": "58f401bc1a8c37267f81760abaa762cd", "key": "description"}, {"hash": "65ca212fe321b4dd51716f4f37e209c9", "key": "hackapp"}, {"hash": "73364ee6c4bcc42a7429f1fd2deb2562", "key": "href"}, {"hash": "79ecc4f7a9e6365d02ee4147808281f7", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "79ecc4f7a9e6365d02ee4147808281f7", "key": "published"}, {"hash": "6513c3f77ea92f1c05c54fa7fe0d02b7", "key": "references"}, {"hash": "3b012aae1848bb95fe11f3cebae83cb0", "key": "reporter"}, {"hash": "fa441a0f8c2c3eef40a4d9089b9dabdd", "key": "title"}, {"hash": "96e87ef1fcc8d9d3cdd337488987c423", "key": "type"}, {"hash": "cfcd208495d565ef66e7dff9f98764da", "key": "viewCount"}], "bulletinFamily": "software", "cvss": {"vector": "NONE", "score": 0.0}, "edition": 1, "enchantments": {"score": {"value": 5.0, "vector": "NONE"}, "dependencies": {"references": [], "modified": "2016-09-26T20:43:32"}, "vulnersScore": 5.0}, "type": "hackapp", "description": "HackApp vulnerability scanner discovered that application DWGSee -- DWG Viewer published at the 'play' market has multiple vulnerabilities.", "title": "DWGSee -- DWG Viewer - Customized SSL, External URLs, Native code usage vulnerabilities", "history": [], "objectVersion": "1.2", "cvelist": [], "published": "2016-04-01T08:52:16", "hackapp": {"apk": "COM.DWGSEE.DWGVIEWER.APK", "store": "play", "icon": "http://lh4.ggpht.com/m6xlXbaAbAqWAjhOXuKTKVCrfJEJBQ8ZgjnpwYLLy6h0MJn0p66uoAEwr88wy-r6GBE=w300", "version": "3.09", "release": "2013-11-18T00:00:00", "name": "DWGSee -- DWG Viewer", "link": "https://play.google.com/store/apps/details?id=com.dwgsee.dwgviewer&hl=en", "bugs": [{"description": "Native code (.so) usage 'System.loadLibrary();' is found.", "name": "Native code usage", "id": "a7d58476010bfa3c62d5cc4cf1d038e7", "severity": "notice"}, {"description": "SD-cards and other external storages have 'worldwide read' policy.", "name": "SD-card access", "id": "09a88284cb4ad7ef721ce24100122fba", "severity": "medium"}, {"description": "All items deleted with 'file.delete()' could be recovered.", "name": "Unsafe deleting", "id": "461f83030edf5abefdb3e55a511430a3", "severity": "notice"}, {"description": "\n\t\t\tCheck certificate validation. Do not create or redefine X509Certificate class methods by yourself, if you don't understand risks. Use the existing API.\n\t\t\t", "name": "Customized SSL", "id": "9d403813d3ba231b095f9b2040a82646", "severity": "critical"}, {"description": "Are you sure these files should be here?", "name": "Suspicious files", "id": "204144e3a35e96936bae492d18a83870", "severity": "notice"}, {"description": "Were do they point?", "name": "External URLs", "id": "cc0d3c0979f27a74ff0bfb2a830ff997", "severity": "notice"}], "vendor": "autodwg"}, "references": ["https://play.google.com/store/apps/details?id=com.dwgsee.dwgviewer&hl=en"], "reporter": "Hackapp.org", "affectedSoftware": [{"version": "3.09", "name": "DWGSee -- DWG Viewer", "operator": "le"}], "modified": "2016-04-01T08:52:16", "href": "https://hackapp.com/report/d84a09367e030a66e05fed118463f281"}

{}