Lucene search

K
jvnJapan Vulnerability NotesJVN:77360971
HistoryMar 26, 2013 - 12:00 a.m.

JVN#77360971: Simeji vulnerable to information disclosure

2013-03-2600:00:00
Japan Vulnerability Notes
jvn.jp
14

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.6%

Simeji is a Japanese Input Method Editor (IME) for Android devices. Simeji contains an issue in the access permissions for the certain files.

Impact

If a user of the affected product uses other malicious Android application, information managed by the affected product may be disclosed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • Simeji 4.8.1 and earlier

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

53.6%

Related for JVN:77360971