CVE-2012-4011

2012-09-0810:00:00

jpcert

www.cve.org

cybozu kunai

android app

remote code execution

crafted web site

AI Score

7.1

Confidence

High

EPSS

0.005

Percentile

75.4%

JSON

The Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.

References

cs.cybozu.co.jp/information/20120910up01.php

jvn.jp/en/jp/JVN23568423/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000083