Unscored CVE-2013-3646 EUVD-2013-3579GHSA-77x5-m2gm-32gh

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive inform…

Published Jun 18, 2013 · Updated Sep 16, 2024 · Assigned by jpcert

Description

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.

References

JVNDB-2013-000059 third-party-advisory
https://live.cybozu.co.jp/trouble.html?q=2530
JVN#63428218 third-party-advisory