PT-2012-4152 · Nec Biglobe · Nec Biglobe Yome Collection

Kazuhiko Kusano · Publicado 2012-07-05 · Atualizado 2012-07-17 · CVE-2012-2640

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NEC BIGLOBE Yome Collection application versions 1.8.3 and earlier

Description The issue allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READ PHONE STATE permission.

Recommendations For NEC BIGLOBE Yome Collection application versions 1.8.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-2640

Produtos afetados

Nec Biglobe Yome Collection

Referências · 6

• http://jvn.jp/en/jp/JVN05102851/995355/index.html · Nota
• http://nec.co.jp/security-info/secinfo/nv12-008.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2640 · Nota de Segurança
• http://jvn.jp/en/jp/JVN05102851/index.html · Nota
• http://yomecolle.jp/info/android_oshirase · Aviso do Fabricante
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000064 · Nota