The Opera Mobile application before 12.1 and Opera Mini application before 7.5 for Android do not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvn.jp/en/jp/JVN27691264/index.html | third party advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000112 | third party advisory |