The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN86040029/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005 | Vendor Advisory |
http://jvn.jp/en/jp/JVN86040029/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:44
Type | Values Removed | Values Added |
---|---|---|
References | () http://jvn.jp/en/jp/JVN86040029/index.html - Vendor Advisory | |
References | () http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005 - Vendor Advisory |
Information
Published : 2013-02-06 12:05
Updated : 2024-11-21 01:44
NVD link : CVE-2012-5187
Mitre link : CVE-2012-5187
CVE.ORG link : CVE-2012-5187
JSON object : View
Products Affected
weathernews
- weathernews_touch
CWE
CWE-264
Permissions, Privileges, and Access Controls