Information disclosure in Google Android

CVE-2012-1243

The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.

Vulnerability class: Information Disclosure

EPSS: 0.016 (72.7th percentile) — read the EPSS interpretation.

Affected products

Google Android
Studiohitori Twitrocker2_android — versions 1.0.18, 1.0.19, 1.0.20
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_SECUNIA, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_CONFIRM)
vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)
vultures@jpcert.or.jp (x_refsource_OSVDB, vdb-entry)