CVE-2012-2646
Last modified
CVE-2012-2646 is a vulnerability of currently unknown severity. The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.. EPSS estimates a 1.92% chance of exploitation in the next 30 days.
Description
The Sleipnir Mobile application before 2.1.0 and Sleipnir Mobile Black Edition application before 2.1.0 for Android do not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fenrir-Inc | Sleipnir Mobile | < 2.1.0 |
References
- http://jvn.jp/en/jp/JVN88643450/index.htmlThird Party Advisory, VDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071Third Party Advisory, VDB Entry
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnirThird Party Advisory
- http://jvn.jp/en/jp/JVN88643450/index.htmlThird Party Advisory, VDB Entry
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000071Third Party Advisory, VDB Entry
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnirThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-2646?
How severe is CVE-2012-2646?
How do I fix CVE-2012-2646?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-2640The NEC BIGLOBE Yome Collection application 1.8.3 and earlie…
- CVE-2012-2641Cross-site scripting (XSS) vulnerability in Zenphoto before …
- CVE-2012-2642Cross-site scripting (XSS) vulnerability in the MT4i plugin …
- CVE-2012-2643Cross-site scripting (XSS) vulnerability in KENT-WEB YY-BOAR…
- CVE-2012-2644Cross-site scripting (XSS) vulnerability in the MT4i plugin …
- CVE-2012-2645The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlie…
- CVE-2012-2647Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari all…
- CVE-2012-2648Cross-site scripting (XSS) vulnerability in the GoodReader a…
- CVE-2012-2649The Sleipnir Mobile application 2.2.0 and earlier and Sleipn…
- CVE-2012-2652The bdrv_open function in Qemu 1.0 does not properly handle …
- CVE-2012-2653arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and pos…
- CVE-2012-2654The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Fols…
Are you affected by CVE-2012-2646?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
