Lucene search

K
jvnJapan Vulnerability NotesJVN:46088915
HistoryJul 13, 2012 - 12:00 a.m.

JVN#46088915: Yahoo! Browser vulnerable in the WebView class

2012-07-1300:00:00
Japan Vulnerability Notes
jvn.jp
26

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.7%

Yahoo! Browser is a web browser for Android devices. Yahoo! Browser contains a vulnerability in the WebView class.

Impact

If a user of the affected product uses other malicious Android application, information managed by the affected product may be disclosed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Yahoo! Browser 1.2.1 and earlier

According to the developer, it was found that version 1.2.1 released on 2012/7/13 did not resolve the vulnerability, therefore, the developer released version 1.2.2 on 2012/7/18 to address the reported issue.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

69.7%

Related for JVN:46088915