Vulnerability in Google Android

CVE-2012-0326

The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.

EPSS: 0.015 (72.4th percentile) — read the EPSS interpretation.

Affected products

Google Android
Tetsuya_aoyama Twicca — versions 0.7.0, 0.8.8, 0.9.4g
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)
vultures@jpcert.or.jp (x_refsource_CONFIRM, Patch, Vendor Advisory)
vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_CONFIRM, Patch)
vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)