Lucene search

K
jvnJapan Vulnerability NotesJVN:42625179
HistoryDec 21, 2012 - 12:00 a.m.

JVN#42625179: Loctouch for Android vulnerable in handling of implicit intents

2012-12-2100:00:00
Japan Vulnerability Notes
jvn.jp
14

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

41.6%

Loctouch provided by NHN Japan, is an application that logs location information. Loctouch for Android contains a vulnerability in the handling of implicit intents.

Impact

Location logs that include non-public information may be leaked to a third party through a malicious Android application.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Loctouch for Android 3.4.6 and earlier

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.001

Percentile

41.6%

Related for JVN:42625179