JVN#01167429: OpenWnn for Android vulnerable to information disclosure

OpenWnn provided by OMRON SOFTWARE Co., Ltd. is a Japanese Input Method Editor (IME). OpenWnn for Android contains an issue in the access permissions for certain files.

Impact

If a user of the affected product uses other malicious Android application, information managed by the affected product may be disclosed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Apply a workaround
The following workaround may mitigate the affects of this vulnerability until an update can be applied.

• Stop using OpenWnn for Android and use another IME software.

Products Affected

• OpenWnn for Android 1.3.5 and earlier