JVN#78601526: GREE for Android vulnerable to directory traversal

GREE for Android contains an issue in handling URL inputs, which may result in a directory traversal vulnerability.

Impact

If a user of the affected product uses another malicious Android application, information managed by the affected product may be disclosed.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

According to the developer, this vulnerability was addressed in GREE 1.3.3 (released to Google Play on 2011/11/30).

Products Affected

• GREE versions prior to 1.3.3