RCE in Fenrir-Inc Sleipnir Mobile
CVE-2012-2649
The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.
Affected products
- Fenrir-inc Sleipnir_mobile — versions 1.0.0, 1.1.0, 1.2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_CONFIRM)
- vultures@jpcert.or.jp (x_refsource_CONFIRM)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)