OSVDB ID: 85819 Title: jigbrowser+ Application for Android WebView Class Implementation Application Handling Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
jigbrowser+ Application for Android contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the applications fail to properly implement the WebView class. This may allow a context-dependent attacker to use a specially crafted application to gain access to potentially sensitive information. |
Classification |
Location:
Context Dependent,
Mobile Phone / Hand-held Device
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Upgrade Exploit: Exploit Private Disclosure: Vendor Verified, Coordinated Disclosure |
Solution |
Upgrade to version 1.5.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |