CVE-2012-4006 Information disclosure in n/a
Remote attackers can obtain sensitive information from GREE Android applications via a crafted application due to improper WebView implementation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2012-4006?
CVE-2012-4006 is a medium-severity vulnerability in n/a, published on 17 Aug 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus application before 1.1.0, and KDDI&GREE GREE Market application before 2.1.2 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Weakness: CWE-200
Which versions are affected by CVE-2012-4006?
It affects 8 products.
Products include Gree Gree, Gree Haconiwa, Gree Kaizokuoukoku Columbus, Gree Monpura, Gree Seisen Cerberus, Gree Tanken Dorirando and 2 more.
How do I fix CVE-2012-4006?
No fix has been published for CVE-2012-4006 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-4006 being exploited?
There is no known exploitation of CVE-2012-4006 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-pxvv-79qf-rgqh.