Information disclosure in Cybozu Kunai Browser For Remote Service
CVE-2012-4013
The WebView class in the Cybozu KUNAI Browser for Remote Service application beta for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.
Vulnerability class: Information Disclosure
EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.
Affected products
- Cybozu Kunai_browser_for_remote_service
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_MISC)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)