CVE-2012-1243 The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| studiohitori twitrocker2 android | = 1.0.18 | No fix listed |
| studiohitori twitrocker2 android | = 1.0.19 | No fix listed |
| studiohitori twitrocker2 android | = 1.0.20 | No fix listed |
| studiohitori twitrocker2 android | = 1.0.21 | No fix listed |
| studiohitori twitrocker2 android | = 1.0.22 | No fix listed |
References
- JVN#00000601 third-party-advisory
- JVNDB-2012-000033 third-party-advisory
- 81447 vdb-entry
- 48894 third-party-advisory
- 53173 vdb-entry
- twitrocker2-webview-sec-bypass(75036) vdb-entry
- play.google.com