Unscored severity · published Aug 31, 2012
CVE-2012-4009
The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via…
–
CVSS
2%
EPSS
No
On KEV
Description
The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Cybozu Live · Cybozu
through 1.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4009
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4009
jvn.jp
http://jvn.jp/en/jp/JVN77393797/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000082
magazine.cybozulive.com
http://magazine.cybozulive.com/2012/08/291200.html
More from Cybozu Live
–
CVE-2013-3647
The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted…
–
CVE-2013-3646
The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via…
–
CVE-2012-4008
The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary…