Vulnerability Details CVE-2012-0316
The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://cookpad.typepad.jp/help/2012/02/23oshirase.html
- http://jvn.jp/en/jp/JVN25731073/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000014
- http://osvdb.org/79643
- http://secunia.com/advisories/48065
- http://www.securityfocus.com/bid/52189
- http://cookpad.typepad.jp/help/2012/02/23oshirase.html
- http://jvn.jp/en/jp/JVN25731073/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000014
- http://osvdb.org/79643
- http://secunia.com/advisories/48065
- http://www.securityfocus.com/bid/52189
Products affected by CVE-2012-0316
-
cpe:2.3:a:cookpad:android_activities:1.5.16
-
cpe:2.3:a:cookpad:android_mykitchen:1.1.1