Description
The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain sensitive information or execute OS commands, via a crafted HTML document.
References
- http://jvn.jp/en/jp/JVN70465405/995407/index.html
- JVN#70465405 third-party-advisory
- JVNDB-2015-000110 third-party-advisory