JVN#70465405: Yodobashi App for Android vulnerable to arbitrary Java method execution

Yodobashi App for Android provided by Yodobashi Camera Co.,Ltd. contains a vulnerability where an arbitrary Java method may be executed.

Impact

When opening a specially crafted website, an attacker may be able to execute an arbitrary Java method. As a result, information stored in Android devices may be obtained or arbitrary OS commands may be executed.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Yodobashi App for Android versions 1.2.1.0 and earlier