Description
The Cookpad 1.5.16 and earlier and Cookpad Noseru 1.1.1 and earlier applications for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
References
- JVNDB-2012-000014 third-party-advisory
- JVN#25731073 third-party-advisory
- 48065 third-party-advisory
- http://cookpad.typepad.jp/help/2012/02/23oshirase.html
- 52189 vdb-entry
- 79643 vdb-entry