CVE-2012-2635

{"id": "CVE-2012-2635", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-06-15T19:55:01.687", "references": [{"url": "http://jvn.jp/en/jp/JVN90751882/index.html", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000057", "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application."}, {"lang": "es", "value": "La aplicaci\u00f3n Dolphin Browser HD anteriores a 7.6 y Dolphin para la aplicaci\u00f3n Pad anteriores a 1.0.1 de Android no implementa apropiadamente la clase WebView, lo que permite a atacantes remotos obtener informaci\u00f3n confidencial a trav\u00e9s de una aplicaci\u00f3n modificada."}], "lastModified": "2012-06-18T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dolphin-browser:dolphin_browser_hd:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1E66091-2474-4DC7-8C1F-54C3F145AC57", "versionEndIncluding": "7.4.0"}, {"criteria": "cpe:2.3:a:dolphin-browser:dolphin_browser_hd:6.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4C08F71-AB4A-4570-B5BA-EBD2CC4BCAB4"}, {"criteria": "cpe:2.3:a:dolphin-browser:dolphin_browser_hd:7.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D9BB68F-7524-4473-8BFF-695C7A82150F"}, {"criteria": "cpe:2.3:a:dolphin-browser:dolphin_browser_hd:7.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88E37571-026F-4881-9EB1-704745D3FCF3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8255F035-04C8-4158-B301-82101711939C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dolphin-browser:dolphin_for_pad:*:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB06260B-A5A4-4DBC-BF10-01A95D41C554", "versionEndIncluding": "1.0"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}