The Cybozu Live application prior to 2.0.1 for Android allows remote malicious users to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cybozu cybozu live 1.0.4 |
||
cybozu cybozu live |