FKIE_CVE-2012-0326

Vulnerability from fkie_nvd - Published: 2012-03-17 10:55 - Updated: 2026-04-29 01:13
Severity ?
Summary
The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application.
References
vultures@jpcert.or.jphttp://jvn.jp/en/jp/JVN31860555/index.html
vultures@jpcert.or.jphttp://jvndb.jvn.jp/jvndb/JVNDB-2012-000024
vultures@jpcert.or.jphttp://osvdb.org/80106
vultures@jpcert.or.jphttp://twicca.r246.jp/notice/Patch
vultures@jpcert.or.jphttp://www.securityfocus.com/bid/52442
vultures@jpcert.or.jphttps://exchange.xforce.ibmcloud.com/vulnerabilities/73951
vultures@jpcert.or.jphttps://play.google.com/store/apps/details?id=jp.r246.twiccaPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/en/jp/JVN31860555/index.html
af854a3a-2127-422b-91ae-364da2661108http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/80106
af854a3a-2127-422b-91ae-364da2661108http://twicca.r246.jp/notice/Patch
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/52442
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/73951
af854a3a-2127-422b-91ae-364da2661108https://play.google.com/store/apps/details?id=jp.r246.twiccaPatch, Vendor Advisory
Impacted products
Vendor Product Version
tetsuya_aoyama twicca 0.7.0
tetsuya_aoyama twicca 0.8.8
tetsuya_aoyama twicca 0.9.4g
tetsuya_aoyama twicca 0.9.4g2
tetsuya_aoyama twicca 0.9.13
tetsuya_aoyama twicca 0.9.13a
tetsuya_aoyama twicca 0.9.13b-rc2
tetsuya_aoyama twicca 0.9.16
tetsuya_aoyama twicca 0.9.17b
tetsuya_aoyama twicca 0.9.20
tetsuya_aoyama twicca 0.9.20a
tetsuya_aoyama twicca 0.9.20b
tetsuya_aoyama twicca 0.9.20c
tetsuya_aoyama twicca 0.9.20e
tetsuya_aoyama twicca 0.9.26
tetsuya_aoyama twicca 0.9.26c
tetsuya_aoyama twicca 0.9.26c2
tetsuya_aoyama twicca 0.9.30
tetsuya_aoyama twicca 0.9.31
tetsuya_aoyama twicca 0.9.31a
google android *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "88F37994-AE64-42F2-B19F-DE81A5AD9B65",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.8.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAB554DC-480B-4300-889C-FBB3D5CC91DF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.4g:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "45D1523B-2707-4C6F-A798-913765F9BEB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.4g2:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "30DC3D53-6C21-4F73-9F64-0924A543DB26",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.13:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "BDE5CAA0-C481-4E03-AB5C-D3C1C3F1B9FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.13a:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "ED34391F-1410-4A80-9968-651365B914BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.13b-rc2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A65F2485-0D35-4A3F-8CCC-31AED7DB21B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2419DA1-50B9-47B4-B6DE-B31DA2A96FBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.17b:*:*:*:*:*:*:*",
              "matchCriteriaId": "C63ABD69-5A71-455C-B6CC-04765DA206DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "5997AC82-BA35-4E42-A7DE-757FAD330CF6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.20a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C321B08-AD94-4703-ADD0-ECFC13DAB3F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.20b:*:*:*:*:*:*:*",
              "matchCriteriaId": "C129F6E9-54C3-44CA-AFB9-65809C0A915F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.20c:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB9A64ED-D608-4BBA-80B0-286F206D53E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.20e:*:*:*:*:*:*:*",
              "matchCriteriaId": "F22A8ACE-8650-4CFB-8843-E4BF697C5418",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DE1A05D-3FFE-4D11-8EB4-8B1DB0218DA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.26c:*:*:*:*:*:*:*",
              "matchCriteriaId": "93C49F29-39EB-4967-9D87-4952D5988F93",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.26c2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1655A49D-E73E-4402-8D18-3EF37728EE0E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE5D74E8-2022-4481-A95C-1BFC1F7BC5B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "87F430D8-66E1-4451-9591-A492D80A9BCB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tetsuya_aoyama:twicca:0.9.31a:*:*:*:*:*:*:*",
              "matchCriteriaId": "672943A8-C7D5-4118-838F-CD61925D6B09",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8255F035-04C8-4158-B301-82101711939C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The twicca application 0.7.0 through 0.9.30 for Android does not properly restrict the use of network privileges, which allows remote attackers to read media files on an SD card via a crafted application."
    },
    {
      "lang": "es",
      "value": "La aplicaci\u00f3n twicca v0.7.0 hasta v0.9.30 para Android no restringe correctamente el uso de los privilegios de red, permitiendo que atacantes remotos lean ficheros en la tarjeta SD mediante una aplicaci\u00f3n manipulada."
    }
  ],
  "id": "CVE-2012-0326",
  "lastModified": "2026-04-29T01:13:23.040",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2012-03-17T10:55:01.327",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://jvn.jp/en/jp/JVN31860555/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://osvdb.org/80106"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Patch"
      ],
      "url": "http://twicca.r246.jp/notice/"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://www.securityfocus.com/bid/52442"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73951"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://play.google.com/store/apps/details?id=jp.r246.twicca"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvn.jp/en/jp/JVN31860555/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000024"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/80106"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://twicca.r246.jp/notice/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/52442"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73951"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://play.google.com/store/apps/details?id=jp.r246.twicca"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.