JVNDB-2012-000074

LINE for Android vulnerable in handling of implicit intents

LINE for Android contains a vulnerability in the handling of implicit intents.

LINE for Android provided by NHN Japan, is an application for communication with others. LINE for Android contains a vulnerability in the handling of implicit intents.

Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Base Metrics: 2.6 (Low) [IPA Score]

• Access Vector: Network
• Access Complexity: High
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: None
• Availability Impact: None

NHN Japan

• LINE for Android version 2.5.4 and earlier

Information such as messages sent by LINE may be leaked to a third party through a malicious application.

[Update the software]
According to the developer, the product is automatically updated when the application is used without user interaction.

For more information, refer to the information provided by the developer.

NHN Japan

• NHN Japan : <Security Information> About a vulnerability in LINE for Android (Japanese only)

1. No Mapping(CWE-DesignError) [IPA Evaluation]

1. CVE-2012-4005

1. JVN : JVN#67435981
2. National Vulnerability Database (NVD) : CVE-2012-4005

[2012/08/07]
  Web page was published