Angel for Android 'WebView' Class Information Disclosure Vulnerability

Bugtraq ID:	60518
Class:	Design Error
CVE:	CVE-2013-3642
Remote:	Yes
Local:	No
Published:	Jun 11 2013 12:00AM
Updated:	Jun 11 2013 12:00AM
Credit:	Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc.
Vulnerable:	Jun.I Angel Browser 1.76b Jun.I Angel Browser 1.68b Jun.I Angel Browser 1.62b Jun.I Angel Browser 1.47b
Not Vulnerable:

Angel for Android 'WebView' Class Information Disclosure Vulnerability

Angel Browser for Android is prone to an information-disclosure vulnerability.

Remote attackers can exploit this issue to gain access to sensitive information. This may aid in further attacks.

Angel Browser 1.47b, 1.62b, 1.68b, and 1.76b are vulnerable.

Angel for Android 'WebView' Class Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at:[email protected].

Angel for Android 'WebView' Class Information Disclosure Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Angel for Android 'WebView' Class Information Disclosure Vulnerability

References:

• Angel Browser Homepage (Google)
  
• Angel Browser vulnerable in the WebView class (JVN)