Lucene search

K
jvnJapan Vulnerability NotesJVN:93344001
HistorySep 25, 2012 - 12:00 a.m.

JVN#93344001: ATOK for Android issue in the access permissions for the learning information file

2012-09-2500:00:00
Japan Vulnerability Notes
jvn.jp
23

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.004

Percentile

72.6%

ATOK for Android provided by JUST Systems contains an issue where another application may access the learning information file which stores user input strings.

Impact

If a user of the affected product uses other malicious Android application, the learning information file may be obtained.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • ATOK for Android versions prior to 1.0.4
    According to the developer, version information can be obtained through the following steps.

> _[Steps for checking version number]
By long touch “A1” at a screen where text can be entered, open ATOK Menu -> tap ATOK Settings.
Check the version number towards the bottom.

Japanese text entering system ATOK
Ver.1.X.X <- this number is the version number
©2012 JUST Systems

  • This issue is addressed in versions after Ver.1.0.4_

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.004

Percentile

72.6%

Related for JVN:93344001