Unscored severity · published Jul 16, 2012
CVE-2012-2645
The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
YB
Yahoo! Browser · Yahoo
through 1.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2645
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2645
jvn.jp
http://jvn.jp/en/jp/JVN46088915/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000070
secunia.com
http://secunia.com/advisories/49905
www.securityfocus.com
http://www.securityfocus.com/bid/54488
Patch
https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser
More from Yahoo! Browser
–
CVE-2013-2316
The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than…
–
CVE-2013-2307
The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site