Description
The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.
References
- http://magazine.cybozulive.com/2012/08/291200.html
- JVNDB-2012-000081 third-party-advisory
- JVN#23009798 third-party-advisory