CVE-2012-0322

The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://jvn.jp/en/jp/JVN08871006/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020
http://jvn.jp/en/jp/JVN08871006/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:estrongs:es_file_explorer:1.6.0.2:::::android::
	cpe:2.3:a:estrongs:es_file_explorer:1.6.1.1:::::android::

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:34

Type	Values Removed	Values Added
References	~~() http://jvn.jp/en/jp/JVN08871006/index.html -~~	() http://jvn.jp/en/jp/JVN08871006/index.html -
References	~~() http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020 -~~	() http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020 -

Information

Published : 2012-03-05 21:55

Updated : 2024-11-21 01:34

NVD link : CVE-2012-0322

Mitre link : CVE-2012-0322

CVE.ORG link : CVE-2012-0322

JSON object : View

Products Affected

google

android

estrongs

es_file_explorer

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2012-0322", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-03-05T21:55:00.807", "references": [{"url": "http://jvn.jp/en/jp/JVN08871006/index.html", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvn.jp/en/jp/JVN08871006/index.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000020", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The EStrongs ES File Explorer application 1.6.0.2 through 1.6.1.1 for Android does not properly restrict access, which allows remote attackers to read arbitrary files via vectors involving an unspecified function."}, {"lang": "es", "value": "La aplicaci\u00f3n EStrongs ES File Explorer v1.6.0.2 hasta v1.6.1.1 para Android no restringe el acceso de forma adecuada, lo que permite a atacantes remotos leer ficheros a trav\u00e9s de vectores que implican una funci\u00f3n no especificada.\r\n"}], "lastModified": "2024-11-21T01:34:47.893", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:estrongs:es_file_explorer:1.6.0.2:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "E485A4B7-1554-4294-BDCB-C9BE67EA7781"}, {"criteria": "cpe:2.3:a:estrongs:es_file_explorer:1.6.1.1:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "CBCE8965-B3CC-4016-BC22-14481F3263E4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8255F035-04C8-4158-B301-82101711939C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vultures@jpcert.or.jp"}