Description
The TwitRocker2 application before 1.0.23 for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
References
- JVN#00000601 third-party-advisory
- 53173 vdb-entry
- JVNDB-2012-000033 third-party-advisory
- 48894 third-party-advisory
- https://play.google.com/store/apps/details?id=com.studiohitori.twitrocker2
- twitrocker2-webview-sec-bypass(75036) vdb-entry
- 81447 vdb-entry