Vulnerability Name: | CVE-2012-2640 (CCN-76744) | ||||||||
Assigned: | 2012-07-03 | ||||||||
Published: | 2012-07-03 | ||||||||
Updated: | 2012-07-17 | ||||||||
Summary: | The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READ_PHONE_STATE permission. | ||||||||
CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||||
CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-264 | ||||||||
Vulnerability Consequences: | Obtain Information | ||||||||
References: | Source: MITRE Type: CNA CVE-2012-2640 Source: CCN Type: JVN#05102851 Yome Collection for Android issue in management of IMEI Source: CONFIRM Type: UNKNOWN http://jvn.jp/en/jp/JVN05102851/995355/index.html Source: JVN Type: UNKNOWN JVN#05102851 Source: JVNDB Type: UNKNOWN JVNDB-2012-000064 Source: CCN Type: SA49788 Yome Collection for Android IMEI Disclosure Weakness Source: CONFIRM Type: UNKNOWN http://www.nec.co.jp/security-info/secinfo/nv12-008.html Source: CCN Type: OSVDB ID: 83604 Yome Collection for Android International Mobile Equipment Identity (IMEI) Information Disclosure Source: CCN Type: BID-54340 Yome Collection for Android Information Disclosure Vulnerability Source: CCN Type: Yome Web site Yome Collection for Android Source: CONFIRM Type: Patch, Vendor Advisory http://yomecolle.jp/info/android_oshirase/ Source: XF Type: UNKNOWN yome-android-info-disclosure(76744) | ||||||||
Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
BACK |