Pebble Blog Entry CVE-2012-4022 Security Vulnerability

Bugtraq ID:	56491
Class:	Input Validation Error
CVE:	CVE-2012-4022
Remote:	Yes
Local:	No
Published:	Nov 02 2012 12:00AM
Updated:	Nov 02 2012 12:00AM
Credit:	Takahisa Kishiya
Vulnerable:	Pebble Pebble 2.3.2 Pebble Pebble 2.3.1 Pebble Pebble 2.6.3 Pebble Pebble 2.6.2 Pebble Pebble 2.6.1 Pebble Pebble 2.3
Not Vulnerable:	Pebble Pebble 2.6.4

Pebble Blog Entry CVE-2012-4022 Security Vulnerability

Pebble is prone to a security vulnerability.

Successful exploitation of the issue may allow an attacker to make blog entries unviewable.

Pebble versions prior to 2.6.4 are affected.

Pebble Blog Entry CVE-2012-4022 Security Vulnerability

An attacker can exploit this issue using a browser.

Pebble Blog Entry CVE-2012-4022 Security Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Pebble Blog Entry CVE-2012-4022 Security Vulnerability

References:

• JVN#75492883 Pebble vulnerability where entries may become unviewable (JVN)
  
• JVNDB-2012-000098 Pebble vulnerability where entries may become unviewable (JVN)
  
• Pebble Homepage (Pebble)