CVE-2013-3646
Cybozu Live < 2.0.1 - Remote Code Execution via Crafted Web Site
Title source: llmDescription
The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression.
References (3)
Core 3
Core References
Third Party Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000059
Vendor Advisory x_refsource_confirm
https://live.cybozu.co.jp/trouble.html?q=2530
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN63428218/index.html
Scores
EPSS
0.0060
EPSS Percentile
69.7%
Details
CWE
CWE-17
Status
published
Products (2)
cybozu/cybozu_live
1.0.4
cybozu/cybozu_live
< 2.0.0
Published
Jun 18, 2013
Tracked Since
Feb 18, 2026