The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.
References
Link | Resource |
---|---|
http://jvn.jp/en/jp/JVN86040029/index.html | Vendor Advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000005 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-02-06 04:05
Updated : 2013-02-06 21:00
NVD link : CVE-2012-5187
Mitre link : CVE-2012-5187
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
weathernews
- weathernews_touch