CVE-2012-0316

Published: Mar 2, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.

Affected (2)

Products: Cookpad: Android Activities, Android Mykitchen

Cookpad

2 products

Android Activities

Android Mykitchen

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cookpad Android Activities	Up to 1.5.16
Cookpad Android Mykitchen	Up to 1.1.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://cookpad.typepad.jp/help/2012/02/23oshirase.html

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvn.jp/en/jp/JVN25731073/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000014

Source: vultures@jpcert.or.jp

http://osvdb.org/79643

Source: vultures@jpcert.or.jp

http://secunia.com/advisories/48065

Source: vultures@jpcert.or.jp

http://www.securityfocus.com/bid/52189

Source: vultures@jpcert.or.jp

http://cookpad.typepad.jp/help/2012/02/23oshirase.html