CVE-2012-2645 The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted app...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yahoo browser | <= 1.2.0 | No fix listed |
References
- JVN#46088915 third-party-advisory
- JVNDB-2012-000070 third-party-advisory
- 49905 third-party-advisory
- 54488 vdb-entry
- play.google.com patch