CVE-2012-1249

Published: May 21, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The iLunascape application 1.0.4.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive stored information via a crafted application.

Affected (1)

Products: Lunascape: Ilunascape Android

Lunascape

1 product

Ilunascape Android

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lunascape Ilunascape Android	Up to 1.0.4.0

Running on/with	Platform Versions
Google Android	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://jvn.jp/en/jp/JVN86044443/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000044

Source: vultures@jpcert.or.jp

http://osvdb.org/82035

Source: vultures@jpcert.or.jp

http://secunia.com/advisories/49253

Source: vultures@jpcert.or.jp

http://www.securityfocus.com/bid/53619

Source: vultures@jpcert.or.jp

https://play.google.com/store/apps/details?id=jp.co.lunascape.android.ilunascape

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN86044443/index.html