{"api_version":"1","generated_at":"2026-07-23T04:54:33+00:00","cve":"CVE-2012-2646","urls":{"html":"https://cve.report/CVE-2012-2646","api":"https://cve.report/api/cve/CVE-2012-2646.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-2646","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-2646"},"summary":{"title":"CVE-2012-2646","description":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.","state":"PUBLISHED","assigner":"jpcert","published_at":"2012-07-25 10:42:35","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black","name":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Sleipnir Mobile Black Edition - Google Play የAndroid መተግበሪያዎች","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071","name":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir","name":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Sleipnir Mobile - Web Browser - Android Apps on Google Play","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN88643450/index.html","name":"http://jvn.jp/en/jp/JVN88643450/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"JVN#88643450: Sleipnir Mobile for Android vulnerable in the WebView class","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2646","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2646","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"2646","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fenrir-inc","cpe5":"sleipnir_mobile","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"-","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2646","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fenrir-inc","cpe5":"sleipnir_mobile","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"black","cpe11":"android","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T19:42:30.667Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir"},{"name":"JVN#88643450","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN88643450/index.html"},{"name":"JVNDB-2012-000071","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2012-07-25T10:00:00.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black"},{"tags":["x_refsource_CONFIRM"],"url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir"},{"name":"JVN#88643450","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN88643450/index.html"},{"name":"JVNDB-2012-000071","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2012-2646","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black","refsource":"CONFIRM","url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black"},{"name":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir","refsource":"CONFIRM","url":"https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir"},{"name":"JVN#88643450","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN88643450/index.html"},{"name":"JVNDB-2012-000071","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071"}]}}}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2012-2646","datePublished":"2012-07-25T10:00:00.000Z","dateReserved":"2012-05-14T00:00:00.000Z","dateUpdated":"2024-09-17T00:15:58.120Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-07-25 10:42:35","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:-:android:*:*","versionEndExcluding":"2.1.0","matchCriteriaId":"D941663E-BEA7-4EA9-A31F-94D7407647E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:black:android:*:*","versionEndExcluding":"2.1.0","matchCriteriaId":"8787FDCE-26B6-4D2B-AA82-EF463CDF66FE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"2646","Ordinal":"1","Title":"CVE-2012-2646","CVE":"CVE-2012-2646","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"2646","Ordinal":"1","NoteData":"The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.","Type":"Description","Title":"CVE-2012-2646"},{"CveYear":"2012","CveId":"2646","Ordinal":"2","NoteData":"2012-07-25","Type":"Other","Title":"Published"}]}}}