The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN70465405/995407/index.html | |
http://jvn.jp/en/jp/JVN70465405/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000110 | Vendor Advisory |
http://jvn.jp/en/jp/JVN70465405/995407/index.html | |
http://jvn.jp/en/jp/JVN70465405/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000110 | Vendor Advisory |
Configurations
History
21 Nov 2024, 02:28
Type | Values Removed | Values Added |
---|---|---|
References | () http://jvn.jp/en/jp/JVN70465405/995407/index.html - | |
References | () http://jvn.jp/en/jp/JVN70465405/index.html - Vendor Advisory | |
References | () http://jvndb.jvn.jp/jvndb/JVNDB-2015-000110 - Vendor Advisory |
Information
Published : 2015-08-08 01:59
Updated : 2024-11-21 02:28
NVD link : CVE-2015-2980
Mitre link : CVE-2015-2980
CVE.ORG link : CVE-2015-2980
JSON object : View
Products Affected
yodobashi
- yodobashi