CVE-2012-4013 in KUNAI Browser for Remote Service

Summary

The WebView class in the Cybozu KUNAI Browser for Remote Service application beta for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 07/12/2012
• Disclosure: 09/14/2012
• Moderation: VulDB entry created
• Entries: VDB-62248
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00260
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4013
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4013
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4013/