Vulnerability Description
The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.
CVSS Score
6.8
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cybozu | Cybozu Live | <= 1.0.4 |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN23009798/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000081
- http://magazine.cybozulive.com/2012/08/291200.html
- http://jvn.jp/en/jp/JVN23009798/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000081
- http://magazine.cybozulive.com/2012/08/291200.html
FAQ
What is CVE-2012-4008?
CVE-2012-4008 is a vulnerability with a CVSS score of 6.8 (MEDIUM). The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web s...
How severe is CVE-2012-4008?
CVE-2012-4008 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4008?
Check the references section above for vendor advisories and patch information. Affected products include: Cybozu Cybozu Live.