4.3

CVE-2012-4006

The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus application before 1.1.0, and KDDI&GREE GREE Market application before 2.1.2 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gree ≫ Gree Version <= 1.3.9
   Google ≫ Android
Gree ≫ Haconiwa Version <= 1.0.9
   Google ≫ Android
Gree ≫ Kaizokuoukoku Columbus Version <= 1.3.4
   Google ≫ Android
Gree ≫ Monpura Version <= 1.1.0
   Google ≫ Android
Gree ≫ Seisen Cerberus Version <= 1.0.9
   Google ≫ Android
Gree ≫ Tanken Dorirando Version <= 1.0.6
   Google ≫ Android
Gree ≫ Tsurisuta Version <= 1.4.9
   Google ≫ Android
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.07% 0.603
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://jvn.jp/en/jp/JVN99192898/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000077
Vendor Advisory