CVE-2012-2649

EPSS 0.64%
Veröffentlicht 08.08.2012 18:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle vultures@jpcert.or.jp
CVE-Watchlists
Login
Unerledigt
Login

The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fenrir-inc ≫ Sleipnir Mobile Update- Editionblack Version <= 2.2.0

Fenrir-inc ≫ Sleipnir Mobile Version1.0.0 Updatealpha Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.0.0 Updatebeta_update1 Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.0.0 Updaterc Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.1.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.2.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.3.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.4.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.5.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.5.1 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.6.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.7.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version1.7.1 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version2.0.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version2.0.1 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version2.0.2 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version2.0.3 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version2.0.4 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version2.1.0 Update- Editionblack

Fenrir-inc ≫ Sleipnir Mobile Version <= 2.2.0

Fenrir-inc ≫ Sleipnir Mobile Version1.0.0 Updatealpha

Fenrir-inc ≫ Sleipnir Mobile Version1.0.0 Updatebeta_update1

Fenrir-inc ≫ Sleipnir Mobile Version1.0.0 Updaterc

Fenrir-inc ≫ Sleipnir Mobile Version1.1.0

Fenrir-inc ≫ Sleipnir Mobile Version1.2.0

Fenrir-inc ≫ Sleipnir Mobile Version1.3.0

Fenrir-inc ≫ Sleipnir Mobile Version1.4.0

Fenrir-inc ≫ Sleipnir Mobile Version1.5.0

Fenrir-inc ≫ Sleipnir Mobile Version1.5.1

Fenrir-inc ≫ Sleipnir Mobile Version1.6.0

Fenrir-inc ≫ Sleipnir Mobile Version1.7.0

Fenrir-inc ≫ Sleipnir Mobile Version1.7.1

Fenrir-inc ≫ Sleipnir Mobile Version2.0.0

Fenrir-inc ≫ Sleipnir Mobile Version2.0.1

Fenrir-inc ≫ Sleipnir Mobile Version2.0.2

Fenrir-inc ≫ Sleipnir Mobile Version2.0.3

Fenrir-inc ≫ Sleipnir Mobile Version2.0.4

Fenrir-inc ≫ Sleipnir Mobile Version2.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.64%	0.681

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir

https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black

http://jvn.jp/en/jp/JVN99730704/index.html

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075

https://nvd.nist.gov/vuln/detail/CVE-2012-2649

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2649

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2649

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-2649