The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Weathernews_touch | Weathernews | * | 2.3.2 (including) |
| Weathernews_touch | Weathernews | 1.20 (including) | 1.20 (including) |
| Weathernews_touch | Weathernews | 1.23 (including) | 1.23 (including) |
| Weathernews_touch | Weathernews | 1.33 (including) | 1.33 (including) |
| Weathernews_touch | Weathernews | 1.35 (including) | 1.35 (including) |
| Weathernews_touch | Weathernews | 1.38 (including) | 1.38 (including) |
| Weathernews_touch | Weathernews | 1.39 (including) | 1.39 (including) |
| Weathernews_touch | Weathernews | 1.40 (including) | 1.40 (including) |
| Weathernews_touch | Weathernews | 1.43 (including) | 1.43 (including) |
| Weathernews_touch | Weathernews | 1.44 (including) | 1.44 (including) |
| Weathernews_touch | Weathernews | 1.49 (including) | 1.49 (including) |
| Weathernews_touch | Weathernews | 1.50 (including) | 1.50 (including) |
| Weathernews_touch | Weathernews | 1.51 (including) | 1.51 (including) |
| Weathernews_touch | Weathernews | 1.53 (including) | 1.53 (including) |
| Weathernews_touch | Weathernews | 1.55 (including) | 1.55 (including) |
| Weathernews_touch | Weathernews | 1.58 (including) | 1.58 (including) |
| Weathernews_touch | Weathernews | 1.64 (including) | 1.64 (including) |
| Weathernews_touch | Weathernews | 1.65 (including) | 1.65 (including) |
| Weathernews_touch | Weathernews | 1.66 (including) | 1.66 (including) |
| Weathernews_touch | Weathernews | 1.67 (including) | 1.67 (including) |
| Weathernews_touch | Weathernews | 1.68 (including) | 1.68 (including) |
| Weathernews_touch | Weathernews | 2.0.0 (including) | 2.0.0 (including) |
| Weathernews_touch | Weathernews | 2.1.0 (including) | 2.1.0 (including) |
| Weathernews_touch | Weathernews | 2.1.1 (including) | 2.1.1 (including) |
| Weathernews_touch | Weathernews | 2.2.0 (including) | 2.2.0 (including) |
| Weathernews_touch | Weathernews | 2.3.1 (including) | 2.3.1 (including) |