JVN#10745573: Janetter vulnerable to information disclosure

Janetter is a client software for using Twitter. Janetter contains an information disclosure vulnerability.

Impact

When a malicious page is opened with a web browser while Janetter is being used, session information used to communicate with Twitter may be disclosed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

According to the developer, the Windows version of Janetter contains an automatic update feature. This feature automatically updates Janetter once a day.

Products Affected

• Janetter for Windows versions prior to 3.3.0.0
• Janetter for Macintosh versions prior to 3.3.0