The Galapagos Browser application for Android does not properly implement the WebView class, which allows attackers to obtain sensitive information via a crafted application.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000056 | third party advisory |
http://jvn.jp/en/jp/JVN99813183/index.html | third party advisory |