NVD

Id
86434  
Name
CVE-2016-4839  
Description
The Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1.2.0), Money Forward for SHIGA BANK (prior to v1.2.0), Money Forward for SHIZUOKA BANK (prior to v1.4.0), Money Forward for SBI Sumishin Net Bank (prior to v1.6.0), Money Forward for Tokai Tokyo Securities (prior to v1.4.0), Money Forward for THE TOHO BANK (prior to v1.3.0), Money Forward for YMFG (prior to v1.5.0) provided by Money Forward, Inc. and Money Forward for AppPass (prior to v7.18.3), Money Forward for au SMARTPASS (prior to v7.18.0), Money Forward for Chou Houdai (prior to v7.18.3) provided by SOURCENEXT CORPORATION do not properly implement the WebView class, which allows an attacker to disclose information stored on the device via a specially crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-05-27  
Published
2017-05-12  
Modified Date
2017-05-26  
Seq
2016-4839  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419572 86434 CVE-2017-7718 http://git.qemu-project.org/?p=qemu.git;a=commit;h=215902d7b6fb50c6fc216fc74f770858278ed904  View
419573 86434 CVE-2017-7718 [oss-security] 20170419 CVE-2017-7718 Qemu: display: cirrus: OOB read access issue  View
419574 86434 CVE-2017-7718 97957  View
419575 86434 CVE-2017-7718 https://bugzilla.redhat.com/show_bug.cgi?id=1443441  View
419576 86434 CVE-2017-7718 http://git.qemu-project.org/?p=qemu.git;a=commit;h=215902d7b6fb50c6fc216fc74f770858278ed904  View
419577 86434 CVE-2017-7718 [oss-security] 20170419 CVE-2017-7718 Qemu: display: cirrus: OOB read access issue  View
419578 86434 CVE-2017-7718 97957  View
419579 86434 CVE-2017-7718 https://bugzilla.redhat.com/show_bug.cgi?id=1443441  View

Related JVN