CVE-2012-4006

2012-08-1720:55:04

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

65.8%

JSON

The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus application before 1.1.0, and KDDI&GREE GREE Market application before 2.1.2 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.

Affected configurations

Nvd

Node

greegreeRange≤1.3.9

greehaconiwaRange≤1.0.9

greekaizokuoukoku_columbusRange≤1.3.4

greemonpuraRange≤1.1.0

greeseisen_cerberusRange≤1.0.9

greetanken_dorirandoRange≤1.0.6

greetsurisutaRange≤1.4.9

kddi_\&_greegree_marketRange≤2.1.1

AND

googleandroid

VendorProductVersionCPE
greegree*cpe:2.3:a:gree:gree:*:*:*:*:*:*:*:*
greehaconiwa*cpe:2.3:a:gree:haconiwa:*:*:*:*:*:*:*:*
greekaizokuoukoku_columbus*cpe:2.3:a:gree:kaizokuoukoku_columbus:*:*:*:*:*:*:*:*
greemonpura*cpe:2.3:a:gree:monpura:*:*:*:*:*:*:*:*
greeseisen_cerberus*cpe:2.3:a:gree:seisen_cerberus:*:*:*:*:*:*:*:*
greetanken_dorirando*cpe:2.3:a:gree:tanken_dorirando:*:*:*:*:*:*:*:*
greetsurisuta*cpe:2.3:a:gree:tsurisuta:*:*:*:*:*:*:*:*
kddi_\&_greegree_market*cpe:2.3:a:kddi_\&_gree:gree_market:*:*:*:*:*:*:*:*
googleandroid*cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gree	gree	*	cpe:2.3:a:gree:gree::::::::
gree	haconiwa	*	cpe:2.3:a:gree:haconiwa::::::::
gree	kaizokuoukoku_columbus	*	cpe:2.3:a:gree:kaizokuoukoku_columbus::::::::
gree	monpura	*	cpe:2.3:a:gree:monpura::::::::
gree	seisen_cerberus	*	cpe:2.3:a:gree:seisen_cerberus::::::::
gree	tanken_dorirando	*	cpe:2.3:a:gree:tanken_dorirando::::::::
gree	tsurisuta	*	cpe:2.3:a:gree:tsurisuta::::::::
kddi_\&_gree	gree_market	*	cpe:2.3:a:kddi_\&_gree:gree_market::::::::
google	android	*	cpe:2.3:o:google:android::::::::