Vulnerability Description
The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mixi | Mixi | <= 4.2.9 |
| Android | All versions |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN92038939/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000078
- http://jvn.jp/en/jp/JVN92038939/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000078
FAQ
What is CVE-2012-4007?
CVE-2012-4007 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comme...
How severe is CVE-2012-4007?
CVE-2012-4007 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4007?
Check the references section above for vendor advisories and patch information. Affected products include: Mixi Mixi, Google Android.