CVEvulnerability
CVE-2012-0326
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-03-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.
Affected configurations
• tetsuya aoyama twicca 0.7.0
• tetsuya aoyama twicca 0.8.8
• tetsuya aoyama twicca 0.9.4g
• tetsuya aoyama twicca 0.9.4g2
• tetsuya aoyama twicca 0.9.13
• tetsuya aoyama twicca 0.9.13a
• tetsuya aoyama twicca 0.9.13b-rc2
• tetsuya aoyama twicca 0.9.16
• tetsuya aoyama twicca 0.9.17b
• tetsuya aoyama twicca 0.9.20
• tetsuya aoyama twicca 0.9.20a
• tetsuya aoyama twicca 0.9.20b
• tetsuya aoyama twicca 0.9.20c
• tetsuya aoyama twicca 0.9.20e
• tetsuya aoyama twicca 0.9.26
• tetsuya aoyama twicca 0.9.26c
• tetsuya aoyama twicca 0.9.26c2
• tetsuya aoyama twicca 0.9.30
• tetsuya aoyama twicca 0.9.31
• tetsuya aoyama twicca 0.9.31a
Related
Weakness · not in database (1)
References
- http://jvn.jp/en/jp/JVN31860555/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024 jvndb.jvn.jp
- http://osvdb.org/80106 osvdb.org
- http://twicca.r246.jp/notice/ Patch
- http://www.securityfocus.com/bid/52442 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73951 exchange.xforce.ibmcloud.com
- https://play.google.com/store/apps/details?id=jp.r246.twicca Patch, Vendor Advisory
- http://jvn.jp/en/jp/JVN31860555/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024 jvndb.jvn.jp
- http://osvdb.org/80106 osvdb.org
- http://twicca.r246.jp/notice/ Patch
- http://www.securityfocus.com/bid/52442 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73951 exchange.xforce.ibmcloud.com
- https://play.google.com/store/apps/details?id=jp.r246.twicca Patch, Vendor Advisory