← Back

CVE-2013-3646

nvd nist
Published: Jun 18, 2013Modified: Apr 29, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.

Affected (2)

Products: Cybozu: Cybozu Live
Cybozu
1 product
Cybozu Live
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Cybozu
Cybozu Live
Up to 2.0.0
Cybozu Live
Version 1.0.4

Related CWEs

CWE-17
CWE-17

References (6)

Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.