PT-2012-1970 · Tencent · Tencent Wblog

Daoyuan Wu + 2 · Published 2012-01-25 · Updated 2012-02-29 · CVE-2011-4865

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Tencent WBlog version 3.3.1 MicroBlogPad version 1.4.0

Description The issue allows remote attackers to read or modify message drafts and search keywords via a crafted application, due to improper data protection.

Recommendations For Tencent WBlog version 3.3.1, update the application to a version that properly protects data. For MicroBlogPad version 1.4.0, update the application to a version that properly protects data.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-4865

Affected Products

Tencent Wblog

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-4865 · Security Note
• http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4865-vulnerability-in-WBlog-MicroBlogPad.html · Note