CVE-2011-4865 in WBlog

Sumário

de MITRE

The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 19/12/2011
• Divulgação: 24/01/2012
• Moderação: aceite
• Entrada: VDB-60004
• CPE: pronto
• CWE: CWE-264 (confirmado)
• CVSS: 6.5 (VulDB)
• EPSS: 0.01045
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4865
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4865
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4865/