CVEvulnerability
CVE-2013-3646
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-06-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-17
Description
The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.
Affected configurations
• cybozu cybozu live (<= 2.0.0)
• cybozu cybozu live 1.0.4
Related
Weakness · not in database (1)
References
- http://jvn.jp/en/jp/JVN63428218/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000059 jvndb.jvn.jp
- https://live.cybozu.co.jp/trouble.html?q=2530 Vendor Advisory
- http://jvn.jp/en/jp/JVN63428218/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000059 jvndb.jvn.jp
- https://live.cybozu.co.jp/trouble.html?q=2530 Vendor Advisory