The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000014 | third party advisory |
http://jvn.jp/en/jp/JVN25731073/index.html | third party advisory |
http://secunia.com/advisories/48065 | third party advisory |
http://cookpad.typepad.jp/help/2012/02/23oshirase.html | vendor advisory |
http://www.securityfocus.com/bid/52189 | vdb entry |
http://osvdb.org/79643 | vdb entry |