Information disclosure in Dolphin-Browser Dolphin Browser Hd
CVE-2012-2635
The Dolphin Browser HD application before 7.6 and Dolphin for Pad application before 1.0.1 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Vulnerability class: Information Disclosure
EPSS: 0.011 (61.3th percentile) — read the EPSS interpretation.
Affected products
- Dolphin-browser Dolphin_browser_hd — versions 6.2.0, 7.2.1, 7.3.0
- Dolphin-browser Dolphin_for_pad
- Google Android
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)