Lucene search

K
nvd[email protected]NVD:CVE-2012-4007
HistoryAug 17, 2012 - 8:55 p.m.

CVE-2012-4007

2012-08-1720:55:04
CWE-200
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.6%

The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends’ comments via a crafted application that leverages the storage of these comments on an SD card.

Affected configurations

NVD
Node
miximixiRange4.2.9
AND
googleandroid

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.6%

Related for NVD:CVE-2012-4007