GREE Multiple Android Applications 'WebView' Class Information Disclosure Vulnerability

Bugtraq ID:	55119
Class:	Design Error
CVE:	CVE-2012-4006
Remote:	Yes
Local:	No
Published:	Aug 17 2012 12:00AM
Updated:	Aug 17 2012 12:00AM
Credit:	Takeshi Terada of Mitsui Bussan Secure Directions, Inc., Katsuhiko Sato of Japan Smartphone Security Association(JSSEC)
Vulnerable:	GREE Tsurisuta 1.4.0 GREE Tanken Dorirando 1.0.6 GREE Seisen Cerberus 1.0.0 GREE Monpura 1.1.0 GREE Kaizokuoukoku Columbus 1.3.4 GREE haconiwa 1.0.0 GREE GREE Market 2.1.1 GREE GREE 1.3.0
Not Vulnerable:	GREE Tsurisuta 1.6.0 GREE Tsurisuta 1.5.0 GREE Tanken Dorirando 1.0.9 GREE Tanken Dorirando 1.0.7 GREE Seisen Cerberus 1.1.1 GREE Seisen Cerberus 1.1.0 GREE Monpura 1.1.2 GREE Monpura 1.1.1 GREE Kaizokuoukoku Columbus 1.3.5 GREE haconiwa 1.3.1 GREE haconiwa 1.1.0 GREE GREE Market 2.1.3 GREE GREE Market 2.1.2 GREE GREE 2.0.4 GREE GREE 1.4.0

GREE Multiple Android Applications 'WebView' Class Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at:[email protected].

GREE Multiple Android Applications 'WebView' Class Information Disclosure Vulnerability

Solution:
Updates are available; please see the references for more information.