CVE-2012-4012

The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL...

CVE-2012-4012

The vulnerability concerns Cybozu KUNAI for Android (before version 2.0.6) where the WebView class can be abused to run arbitrary JavaScript and exfiltrate data when a crafted file: URL is loaded from a local file. This could allow remote attackers to execute code and access sensitive information...