The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Microblogpad | Tencent | 1.4.0 (including) | 1.4.0 (including) |
| Wblog | Tencent | 3.3.1 (including) | 3.3.1 (including) |