Cookpad and Cookpad Noseru for Android 'WebView' Class Information Disclosure Vulnerability

Bugtraq ID:	52189
Class:	Design Error
CVE:	CVE-2012-0316
Remote:	Yes
Local:	No
Published:	Feb 27 2012 12:00AM
Updated:	Mar 19 2015 07:35AM
Credit:	Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc.
Vulnerable:	COOKPAD Cookpad Noseru 1.1.1 COOKPAD Cookpad 1.5.16
Not Vulnerable:

Cookpad and Cookpad Noseru for Android 'WebView' Class Information Disclosure Vulnerability

Cookpad and Cookpad Noseru for Android are prone to an information-disclosure vulnerability; fixes are available.

Remote attackers can exploit this issue to gain access to sensitive information. This may aid in further attacks.

Cookpad and Cookpad Noseru for Android 'WebView' Class Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at:[email protected].

Cookpad and Cookpad Noseru for Android 'WebView' Class Information Disclosure Vulnerability

Solution:
Updates are available; please contact the vendor for more information.

Cookpad and Cookpad Noseru for Android 'WebView' Class Information Disclosure Vulnerability

References:

• Cookpad Android Apps Update (COOKPAD )
  
• Cookpad Homepage (COOKPAD)
  
• JVN#25731073 Multiple COOKPAD applications for Android vulnerable in WebView cla (CERT)
  
• JVNDB-2012-000014 Multiple COOKPAD applications for Android vulnerable in WebVie (CERT)