CVE-2012-4012

2012-09-0810:00:00

jpcert

www.cve.org

cybozu

kunai

webview

vulnerability

android

remote execution

javascript

sensitive information

AI Score

7.1

Confidence

High

EPSS

0.003

Percentile

68.8%

JSON

The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.