CVE:CVE-2012-4006
CNNVD:CNNVD-201208-320
基于Android系统下的多款应用程序中存在漏洞，该漏洞源于未正确实现WebView类。远程攻击者可利用该漏洞通过特制的应用程序获取敏感信息。以下程序中存在该漏洞：GREE应用程序1.4.0之前版本、GREE Tanken Dorirando应用程序1.0.7之前版本、GREE Tsurisuta应用程序1.5.0之前版本、GREE Monpura应用程序1.1.1之前版本、GREE Kaizokuoukoku Columbus应用程序1.3.5之前版本、GREE haconiwa应用程序1.1.0之前版本、GREE Seisen Cerberus应用程序1.1.0之前版本、KDDI&GREE GREE Market应用程序2.1.2之前版本。
solution:Upgrade gree gree to a higher version than 1.3.9,and avoid the version (,1.3.9]; Upgrade gree haconiwa to a higher version than 1.0.9,and avoid the version (,1.0.9]; Upgrade gree kaizokuoukoku_columbus to a higher version than 1.3.4,and avoid the version (,1.3.4]; Upgrade gree monpura to a higher version than 1.1.0,and avoid the version (,1.1.0]; Upgrade gree seisen_cerberus to a higher version than 1.0.9,and avoid the version (,1.0.9]; Upgrade gree tanken_dorirando to a higher version than 1.0.6,and avoid the version (,1.0.6]; Upgrade gree tsurisuta to a higher version than 1.4.9,and avoid the version (,1.4.9]; Upgrade kddi_&_gree gree_market to a higher version than 2.1.1,and avoid the version (,2.1.1]