Lucene search

K
cveJpcertCVE-2012-4008
HistoryAug 31, 2012 - 2:55 p.m.

CVE-2012-4008

2012-08-3114:55:01
CWE-94
jpcert
web.nvd.nist.gov
25
cybozu live
android
remote code execution
cve-2012-4008
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

73.7%

The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.

Affected configurations

Nvd
Node
cybozucybozu_liveRangeโ‰ค1.0.4-android
VendorProductVersionCPE
cybozucybozu_live*cpe:2.3:a:cybozu:cybozu_live:*:-:*:*:*:android:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

73.7%

Related for CVE-2012-4008